I suggest updating to 1.19.0 and applying this change as well https://github.com/NodeBB/NodeBB/commit/e9ee843b274b1e1f38b992650f3f74f940a20a49.
After that users might have to clear their cookies and refresh their browsers. Let us know if they still experience csrf errors after those changes.