i just noticed that, after login in FAS, there is a button "I am a human"
for CSRF check.
It's all good, but clicking button makes POST request to (
) which returns
302 Found and redirects to a same url (GET request) , which returns 403
It seems that navigation "knows" that i am logged in, but content part do
See attached screenshot and log for more info, since it's early morning
and i do not provide a good explanation.