Csrf protection blocks SSO logins for other services [RTFACT-16641]