Volume measurement on share (public) url not working. csrf token (forbidden 403) missing

If I log into WebOBM, I see the csrftoken in the cookie and everything works fine. But when I share the model (public url) to my team members, they are not able to see the volume measurement. See the attached screenshot and error from console.Screen Shot 2020-05-11 at 10.15.40 PM