title: 'F' tokens in urls?
body: <p>Previously updated my mvc application from mvc2 to mvc 3 and last week to mvc 4. Also moved it from IIS6 server to IIS7 server.</p>
  
  <p>Now many urls, generated by mvc routing, have token in url. Like this:</p>
  
  <blockquote>
    <p><a href="http://domain.net/(F(D4379600E44F6AF6D4695965E697E4EF18E37E9D4A33EF1DFAC33B05D8BD1C3601EC6D41276ADE9048699F26558469FB12118644813DE200464A082F0250855D8AC0825CAA33DFF40092C74D3B3AA0440D2547DEFE320118B53A1C43149B9E616D8579D2DFC35225E06055C3E4F8FF37F610729E))/page/something" rel="nofollow">http://domain.net/(F(D4379600E44F6AF6D4695965E697E4EF18E37E9D4A33EF1DFAC33B05D8BD1C3601EC6D41276ADE9048699F26558469FB12118644813DE200464A082F0250855D8AC0825CAA33DFF40092C74D3B3AA0440D2547DEFE320118B53A1C43149B9E616D8579D2DFC35225E06055C3E4F8FF37F610729E))/page/something</a></p>
  </blockquote>
  
  <p>This token is applied for 70% of all urls on pages, even for images.
  It looks like Forms Auth token for cookieless browsers. But I disabled cookieless in web.config(set it to cookies only). Also it applied for all browsers(with enabled cookies), and even when user is not signed in.</p>
  
  <p>How to solve this issue? Any ideas? Think, I missed something when upgraded to new mvc.</p>
  
  <p>UPD. Tried to disable cookieless in next way(web.config):</p>
  
  <pre><code>&lt;sessionState cookieless="false" /&gt;
  &lt;authentication mode="Forms"&gt;
    &lt;forms loginUrl="~/LogOn" timeout="2880" cookieless="UseCookies"  /&gt;
  &lt;/authentication&gt;
  </code></pre>
  
  <p>UPD1. I use couple RenderAction commands in master page, to render some general partial views. and controller methods for these parts, I marked with OututCache attribute. Removed this attribute - and all urls now looks good. It is very strange, but helped me.</p>
  
  <pre><code>&lt;%Html.RenderAction("BlogPosts", "Widgets", new RouteValueDictionary()); %&gt; 
  
  
  [ChildActionOnly]
      //[OutputCache(Duration = 180)]
      public ActionResult BlogPosts()
      {
          var model = new BlogListModel();
          model.BlogPostType = defService.BlogType();
          model.List = widgetService.BlogPosts(3);
          return PartialView("Widgets/BlogPostsWidget", model);
      }
  </code></pre>