Jason, Did you resolve your first issue?I have a situation where the csrf token is empty ("{}") when I make an unauthenticated call to /libs/granite/csrf/token.json. However, when making an authenticated call I receive a token as expected: {"token":"ey....U0"} Thanks, Rob.