Issue #2099439 by linclark, jessebeach: REST's CSRF check is triggered even when using Basic Auth.