Csrf doesn't match when sending requests from another domain

Ah, well, ok, I just found this topic:exploding_head: