You mention that GitHub OAuth is not possible due to your firewall, so I’m not sure what the logs are supposed to be illustrating. The CSRF error on GitHub login would be expected if you have not configured it correctly.
What do you mean by this? If you’re being told this by an automated security scanner, then it is very likely to be a false positive.