title: Unwanted CSRF validation on Liferay 7.3 LoginPortlet
body: <p>After a user performs a login using the portal LoginPortlet the login does not succeed and a WARN was printed to the log:</p>
  <p><code>User 0 is not allowed to access URL http://localhost:8080/web/guest/login and portlet com_liferay_login_web_portlet_LoginPortlet: User 0 did not provide a valid CSRF token for com.liferay.portlet.SecurityPortletContainerWrapper</code></p>
  <p>After a second login afterwards, the login was ok. The issues only occurs if the login page was opened some minutes and the auth token gets invalidated. This is basically fine, but the portal config <code>portlet.add.default.resource.check.whitelist</code> has an exclude for LoginPortlet. But this whitelist seems not avoid the unwanted check. Are there any other places how the avoid CSRF checking for LoginPortlet?</p>