Have you recently done any updates? Or changed any of the files?
If you done updates, make sure that you've uploaded ALL of the files, and not missed any.
System uses sessions to check for an access token which prevents CSRF attacks. If sessions are not working properly (must common cause is caches issues) that system can't work properly.
Please refer this to your hosting company or server administrator.