Thanks to @julian we finaly found the problem.
Here is the pull request.
In fact, this bug only occurs when an administrator update a member profile.
Suppose to be in my controller.js and I need to redirect user on the user page.
var username=user//it's the username
but I obtain an error :
Object #<IncomingMessage> has no method 'csrfToken'
Anyone can help me?