Some users are still having problems with the pop-up login. I think they are actually getting 403s because of the CSRF protection. So I have modified the base template to always have a javascript variable called csrf_token available when they aren't logged in. The ajax_login.js script was then modified to send this value with the ajax post. Fingers crossed.

div.weblinks-link-sort {
   padding-bottom: .5em;
}

ul.weblinks-link-options {
   margin: 0;
   padding-left: 0;
   list-style-type: none;
}

ul.weblinks-link-options li {
   display: inline;
   padding: 0 5px;
}