@julian I have seen the 0.2.0 version of Persona in the admincp and the "only cleared to upgrade to v0.2.0" message with the 0.7.0. Ended up moving to the master / 0.7.1 branch to get rid of some issues which I could not figure out.
I got this error when didn't apply x-csrf-token header to the request. Is there any custom requests?
It should be done like this: https://github.com/NodeBB/NodeBB/blob/master/public/src/client/login.js#L28