Inexplicable CSRF Error

I've got it working now but I don't know what I did to fix it. There was some other what I believe to be unrelated bugs I fixed and then it started working as expected.

I think it was an issue peculiar to Safari. It somehow matches my emails with my time restricted onetime passcode field and auto populates the field in my form for me.. I just have to click the little blue popup field next the form's passcode field in the browser. It must use the name and/or label of the passcode field and scrapes my email to hook it all together?

Simpler is always better