Version Yii 1.1.13:
When using CStatePersister:
$sp = Yii::app()->getStatePersister();
$sp->save($something); //<-- At this moment, a new CSRF_TOKEN is generated.
Then, if next the code a view is rendered with csrf_token validation, the token in the forms rendered are changed and when submit , the error 'Csrf TOken could not be verified' is thrown
Can you show full method body so we'll understand which event follows which?