After configuring Spring Security 3.2, _csrf.token is not bound to a request or a session object.
_csrf.token
This is the spring security config:
&l
Shouldn't you add to the login form?;
As stated in the here in the Spring security documentation