Fix to the CSRF protection blocking a proposal add
Merge branch 'hotfix-2.3.28'