title: Session timeout leads to Access Denied in Spring MVC when CSRF integration with Spring Security
body: <p>I have Integrated CSRF token with Spring Security in my Spring MVC Project. Everything work properly with CSRF token, token will be send from client side to server side.   </p>
  
  <p>I have changed my <code>logout</code> process to make it <code>POST</code> method to send CSRF token and its works fine.</p>
  
  <p>I have face problem when session timeout is occurred, it needs to be redirected to spring default logout URL but it gives me <code>Access Denied</code> on that URL.  </p>
  
  <p>How to override this behavior.  </p>
  
  <p>I have include below line in Security config file   </p>
  
  <pre><code>   &lt;http&gt;
           //Other config parameters
          &lt;csrf/&gt;
     &lt;/http&gt;
  </code></pre>
  
  <p>Please let me know if anyone needs more information. </p>