After configuring Spring Security 3.2, _csrf.token is not bound to a request or a session object.
_csrf.token
This is the spring security config:
&l
Please see my working sample application on Github and compare with your set up.