MC Stuff wrote... Hi Chandran, CSRF token filter will trigger only for
authenticated requests and for anonymous it will never be called. Hence
empty string for anonymous is not a valid case. Thanks, Thanks MC,this
means in publish environment if end users accessing the page CSRF token
will be empty? Is there any way can have some authenticated pages in
publish environment, it should create some default session but it should
be accessed by end user (anonymous user).