CSRF token missing

Well, not during the last year, I admit…