Testing #3396 reveals that attempting to ignore or unignore selected unrecognized neighbors in the "Unrecognized Neighbors" tool fails once CSRF protection is turned on.

I suspect that the buttons that initiate ignore/unignore POST requests aren't regular form buttons, but contain some Javascript magic.

Further investigation is needed to figure exactly what is going on.