The token does not work when I check the sessions on my controllers.
What could it be?
Browsers request a /favicon.ico from your server even if you dont specify it in your meta tags.
Maybe that request messes up your token.
Apart from that, without any code snippets, its hard to help ;]