BigW Consortium Gitlab
Protect OmniAuth request phase against CSRF. Addresses #2268. See merge request !1793