OPS: backport CSRF fix

Signed-off-by: Samuele Kaplun <samuele.kaplun@cern.ch>