title: Jira Creating Project Throws 'Error creating project, XSRF check failed'
body: <p>I'm trying to get a copy of Jira running on a ubuntu server box I have on AWS. I configured Tomcat, and can successfully access my site at <a href="http://example.com:8080/jira" rel="noreferrer">http://example.com:8080/jira</a> and begin the setup process. I am able to create a username, but when instructed to make a first project, I receive the following error upon attempting to save:</p>
  
  <p>Creating Project Throws 'Error creating project, XSRF check failed'</p>
  
  <p>It is the same error that is documented here:</p>
  
  <p><a href="https://confluence.atlassian.com/jirakb/creating-project-throws-error-creating-project-xsrf-check-failed-397083076.html" rel="noreferrer">https://confluence.atlassian.com/jirakb/creating-project-throws-error-creating-project-xsrf-check-failed-397083076.html</a></p>
  
  <p>By Atlassian themselves, as well as here:</p>
  
  <p><a href="https://answers.atlassian.com/questions/283780/looking-for-the-full-list-of-http-headers" rel="noreferrer">https://answers.atlassian.com/questions/283780/looking-for-the-full-list-of-http-headers</a></p>
  
  <p>By some forum users. Both cases suggest that the headers are being blocked, and the second link does a good job of listing out every header:</p>
  
  <pre><code>X-AREQUESTID
  X-ASESSIONID
  X-AUSERNAME
  X-SITEMESH-OFF
  X-Atlassian-Token
  X-Requested-With
  
  Do not forget to allow GET (of course), POST (of course) but also PUT http methods
  </code></pre>
  
  <p>The problem I'm facing is that I haven't been able to find out how my ubuntu server is blocking those headers. I'm running nginx, and will happily post my config if that helps. Otherwise all config was done in tomcat. </p>
  
  <p>I got a tip somewhere that UFW may be blocking them, but that doesn't seem to be running. Does anyone know how I would go about unblocking these headers to resolve my Jira error?</p>