Cluster nodes and load balancer should be added to the CSRF filter whitelist. See How allowed referers work section of the Administration help for detailed steps.
