[1.9.0rc2] Auth workflow fails due to CSRF cookie not being set

[foosel]

Problem

The auth workflow from the appkeys plugin fails if the user is logged in/has a remember me cookie set, but no CSRF cookie is already present:

If the user is not yet logged in and no remember me cookie is present, going through the login dialog first covers up the issue.

Solution

It looks like the workflow isn't setting the CSRF cookie on template rendition, like login dialog and core UI do, so that needs to be looked into.

[foosel]

Fix ready for 1.9.0rc3

[foosel]

1.9.0rc3 is out.