See experiences by @Timeshifter https://www.mediawiki.org/w/index.php?title=Topic:Suspcq0bf5nd3gsd
This is caused because the delivered html correctly includes flow-anon-warning. The auto login of CentralAuth however logs in the user afterwards, but Flow is not made aware of this.