Redirect did not work on it's own so now user must press button which
opens popup to set csrf cookie