As mentioned on Github issue, there is bug with CSRF token with Set-Cookie secure flag. Invalid CSRF - Set-Cookie with secure flag opened 08:46PM - 09 Nov 17 UTC (UTC) closed 08:40AM - 13 Nov 17 UTC (UTC) …

[BUG] CSRF - Set-Cookie with secure flag

holantomas November 9, 2017, 8:48pm 1

As mentioned on Github issue, there is bug with CSRF token with Set-Cookie secure flag.

Check security server