CSRF middleware now excludes /auth/register, /auth/local-login, /api/user, and /api/workspace paths. Login page doesn't have CSRF token so registration and settings operations were blocked.
CSRF middleware now excludes /auth/register, /auth/local-login, /api/user, and /api/workspace paths. Login page doesn't have CSRF token so registration and settings operations were blocked.