[DO NOT MERGE] Bug 894248 - Console and broker must share a session for CSRF token checking to work