CDB-2551 CSRF was still being requested on protected maps, disabling only there
Merge CDB-2551 into release/2.12.0