Yep, all those yaks for just that little fix.  On the plus side, out integration tests are now running with CSRF protection enabled.