CSRF check failed

curl will tell me

status code 907
message current user is not logged in

then I tried curl -s http://localhost/nextcloud/index.php/login -c cookiefile -d “user=xxx&password=xxx”
nothing happened ,
still not logged.