title: Signin request failing due to invalid csrf
body: <p>I am testing a signin page for keystonejs (<a href="http://demo.keystonejs.com/" rel="nofollow noreferrer">http://demo.keystonejs.com/</a>) and cannot get the request to succeed with cypress. A signin request without cypress has the following request headers:</p>
  
  <p><a href="https://i.stack.imgur.com/cncVz.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/cncVz.png" alt="enter image description here"></a></p>
  
  <p>while a request with a cypress test has the following request headers:</p>
  
  <p><a href="https://i.stack.imgur.com/BHJMj.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/BHJMj.png" alt="enter image description here"></a></p>
  
  <p>The only difference I can see is that the cookie is not set in the cypress test request. And because of that the request gets a 403. I am actually using a local version of that server in which I have the email/password configured as the one in the images. The demo site uses a different set provided in that page.</p>
  
  <p>The test is simply:</p>
  
  <pre><code>describe('The Keystone Admin UI Signin Page', function () {
    before(function() {
          cy.visit('http://localhost:3000/keystone/signin')
      })
  
      it('should signin successfully with valid email/password', function () {
          cy.get('#signin-view input[name=email]').clear().type('user@test.e2e');
          cy.get('#signin-view input[name=password]').clear().type('test');
          cy.get('#signin-view button[type=submit]').click();
          cy.get('#react-root').should('be.visible');
      })
  })
  </code></pre>
  
  <p>Anyway to get around this?</p>