I've seen this error before, but can't remember the exact details. Googling doesn't help much so far.
All I remember is that it was some kind of site check from Office. Can't find the solution but vaguely remember you needed an extra DNS record or something.
One thing is for sure it has nothing to do with CSRF itself, just can't locate the Cookie.