Okay cool. I'm looking to modify the CSRF protection so that it doesn't rely on a cookie being set which should be doable. I'll let you know so that you can restore your settings if you haven't already done so. :-)