Hey everyone,
I was having this same problem after I upgraded to the 3.1 version. I would get the error when I tried to login to my account for my website. I then noticed that my website was opening with the "www." in the address bar, which it shouldn't be doing. I then opened my site without the "www." in front of the address and it was working fine. So when I opened the site like this:
www.example.com it would get the "Invalid CSRF token" page and when I opened it like this: europeslist.com it would not get the "Invalid CSRF token" page. So what I did to repair this is I opened my .htaccess file which was written like this:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
And I changed it back to the way I had it, which is like this:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
RewriteCond %{HTTP_HOST} ^www.europeslist.com [NC]
RewriteRule ^(.*)$
http://europeslist.com/$1 [L,R=301]
</IfModule>
And now it is not getting the error anymore!! I am not sure if this will work for anyone else, but I suggest giving it a try.
