Your CSRF Token is expired or not set. Probably a bug, or you didn't send one.