Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.