CSRF token not working (access denied)
@Berdir
Applying patch #14 on this page has solved the problem!
Thank you very much!

Twig template variables containing result of Drupal::url() and Drupal:l:() don't bubble up their cacheability and attachment metadata (e.g. token placeholder)