Invalid token, state does not match

Then I’d next check the leeway option. Because I see no reason for a token to be considered invalid otherwise.