--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -19,7 +19,7 @@ class ApplicationController < ActionController::Base
     # web service worker processes.
     protect_from_forgery(:secret => SecureRandom.hex(64),
                          :except => %i(authenticate external_authenticate kerberos_authenticate saml_login initiate_saml_login oidc_login initiate_oidc_login csp_report),
-                         :with   => :exception)
+                         :with   => :reset_session)

   end