[Bug 1954694] [NEW] CSRF check for user tokens should not be case sensitive.