in functions.php, i commented out these two lines. This worked but i'm not sure what the downline effects might be.

//include_once _DIR_ .'/vendor/owasp/csrf-protector-php/libs/csrf/csrfprotector.php';

//csrfProtector::init();