Error at Login - "The action you requested is not allowed

I think I found the error. In the initial domain, I set env as development. On the new domain, I set it to production, however, in the production env I had commented out the csfr security.