* in all cases it's a mobile browser (and probably Safari) * from the first view straight to login and click ESN Accounts * CSFR cookie is not set, so the callback fails on verification