[hotfix] disable csrf check for mobile

frappe/auth.py

@@ -57,7 +57,7 @@ class HTTPRequest:
 
 	def validate_csrf_token(self):
 		if frappe.local.request and frappe.local.request.method=="POST":
-			if not frappe.local.session.data.csrf_token:
+			if not frappe.local.session.data.csrf_token or frappe.local.session.data.device=="mobile":
 				# not via boot
 				return