[stable13] Don't perform CSRF check on OCS routes with Bearer auth
shareapi_allow_share_dialog_user_enumeration