Bug 21993: Display a user-friendly message when the CSRF token is wrong