Otherwise this leads to an endless redirection in case of a CSRF exception. Also sets user expectation right.