Access forbidden CSRF

login to nextcloud 17 on ubuntu failed with CSRF, but user klick on back arrow on browser, then first page after login appear. look like system has log user ind then after that send messages.