@rlahoda @reactjs @getpantheon Blame react. Nah it's probably a hosting problem. Look up CSRF headers and if your allowed to set them