Update packages.
Config CSRF protection to reset the session instead of raising an exception.