CSRF token not working (access denied) I can get CSRF token to be generated on particular route by putting _crsf_token in a routing file, but on visiting that route , I keep getting an Access Denied error.

Removing CSRF token line from the routing file gives me back access to the access instantly.

What could be possibly wrong?

I have tried to make sense of Menu Callback and CSRF but don't think it is related to my problem.
@Berdir
Applying patch #14 on this page has solved the problem!
Thank you very much!

Twig template variables containing result of Drupal::url() and Drupal:l:() don't bubble up their cacheability and attachment metadata (e.g. token placeholder)