Merge branch '5935-fatal-error-due-to-crsf-security' into '1.4-dev'

Resolve "Fatal error due to CRSF security"

See merge request fusiondirectory/fd!475

(cherry picked from commit 555e9489)

597d64c9  fix(CSRFProtection) Split HTTP_X_FORWARDED_HOST to take only the first value