I pulled on /data/mfmhs/admin this morning and then cleared my web browser's cache.
All was fine at first, so I started running data imports. Now all of a sudden I can't seem to log in because I am getting the "CSRF token is not valid" message on the log in screen again.
I've noticed that with the latest code this always happens, but clearing out the browser cache once usually solves the issue. However, just now I've cleared my cache (and tried different browsers) and the error is still appearing.
The installation of vendor libraries in vendor/ was messed up. I don't know how or why. Reloading them fixes the issue.
Ok, It looks like either the bin/caUtils command "import-data" or "load-import-mapping" is breaking the vendor libraries somehow.
Because I saw that you fixed it just now, but as soon as I ran the above commands to continue the import, the libraries broke again. Now the message is back...