it's a defense measure against various types of impersonation and / or spoofing attaacks online. i can't think of exactly how this is done, but csrf is pretty standard security measure for websites (i used to have this personal site and i have a csrf token because it's a given by django). but it doesn't look like saidit got that on certain pages, and op's problem is kinda related to that kinda attack, at least it's the first thing i thought about checking. so i'm a bit worried.