cinetek/config/packages/ux_turbo.yaml

# Accept the CSRF token sent in a header, as Turbo form submissions do
framework:
    csrf_protection:
        check_header: true