Issue #3528434: \Drupal\Core\Access\RouteProcessorCsrf does not add the correct cache context when generating non html responses
Closes #3528434