Because i can like, but i cant comment, liking only requires csrf & session but posting (when i use those two) returns me to the login page?