LDEV-5397 remove autofocus When someone using an screen readers access a page, by forcing the user to focus on a field form, then all the instructions and page structure is skipped which can be quite confusing
LDEV-5304 Secure login page from CSRF attack Check for CSRF attack only for regular logins. For LoginAs feature and integrations existing HTTP session gets invalidated and so is the CSRF token.