Edge / IE11 bad CSRF behavior

Edge and IE11 does not send Origin header on FORM POST, preventing Nuxeo to be connected with Azure SAML ( and maybe other bad behavior )

The issue is known and confirmed:
https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/10482384/

As we cannot rely on Microsoft ability to fix their issue, we need to provide a workaround

The Headers sent are Referer, so we could in case of those agents and no Origin header based our decision on the Referer header