Upgrade from 2.204.6 to 2.289.3 failed on CSRF

The crumb is only needed if you use username:password instead of username: apikey which is the recommended solution.

I will say that I know for certain active directory plugin is one of plugins that is required to be updated in newer versions of jenkins.