TL194 clean install login issue

[istream]

OS: Ubuntu 10.0.4 LTS
Database: Mysql 5.0.3
Apache2

I installed 1.9.4 as a clean install, installation went through fine.
However when I login using admin/admin, I get "Invalid security token" on top of the signon screen, and I stay on login page.
I checked mantis, could not find any reported issues.
Thanks

[fman]

this is related to unfinished work regarding CSRF, sometime this message appears but when you retry the login, login succed.

[pir2d2]

yes, the second login is successfull, but first login is better.
What does CSRF mean please ?

[TurboPT]

What does CSRF mean please ?

Cross-Site Request Forgery

Google that acronym, abundant information is available.