Discourse 2.3.2 sends the CSRF token in the query string.Referenceshttps://github.com/discourse/discourse/pull/8026