Merge pull request #2453 from Stirling-Tools/csrf2

Csrf fixes

src/main/resources/static/js/downloader.js

@@ -242,7 +242,7 @@
     let errorMessage = null;
 
     try {
-      const response = await fetch(url, {method: 'POST', body: formData});
+      const response = await window.fetchWithCsrf(url, {method: 'POST', body: formData});
       const contentType = response.headers.get('content-type');
 
       if (!response.ok) {