Revert "Temporarily exempt POST /login from CSRF"
Revert "Temporarily exempt POST /login from CSRF"

This reverts commit 7efedf3667d9a39f7e573fe073c4618503df7507.

(Phase 2 going ahead.)

heroku/identity,heroku/identity,ipmobiletech/identity,ipmobiletech/identity,ipmobiletech/identity