Bad CSRF with mailgun replies

I’m using mailgun to forward discourse+%{reply_key}@literatecomputing.com to a gmail inbox that is retrieved via pop3 and I believe that it’s working just fine.