it's using insecure get instead of post method. this crash the csrf cooki protection. KB Version 1.2.44