@rande can you help us understand what this is? do we disable csrf for filters to avoid some issue? and what issue?