user is redirected to some broken page due to csrf after some idle time

Original message was deleted