Using added hidden field I will check where request coming from and also display the validation messages
[release/3.0] Getting ready for Teatro

https://github.com/opf/openproject/pull/1681
[release/3.0] attempt to fix teatro setup

It seems that the secret token env var was not persistent.
Now we generate the secret token as a file and things should be
persistent.

https://github.com/opf/openproject/pull/1681