CDB-2551 CSRF was still being requested on protected maps, disabling only there