1a8fee11a0
In this case, the auth provider is acting as a SSO provider, and can be trusted to maintain its own CSRF protections.