title: _Token was not found in request data in CakePHP 4
body: <p>I have some issue with a simple signup function in cakephp 4,
  I enabled the FormProtection component and it return "
  _Token was not found in request data." </p>
  
  <p>The token is already generated but I don't know why the controller cannot detect it</p>
  
  <pre><code>&lt;?= $this-&gt;Form-&gt;create($user,['class' =&gt; '']) ?&gt;
  &lt;?= $this-&gt;Flash-&gt;render('signup') ?&gt;
  &lt;div class="inp-row"&gt;
  &lt;label for=""&gt;Full Name&lt;/label&gt;
  &lt;?= $this-&gt;Form-&gt;input('name',["placeholder"=&gt;"Your full name",'label'=&gt;false,'required'=&gt;true,'class' =&gt; '']) ?&gt;
  &lt;/div&gt;
  &lt;div class="inp-row"&gt;
  &lt;label for=""&gt;Email Address&lt;/label&gt;
  &lt;?= $this-&gt;Form-&gt;input('username',["placeholder"=&gt;"Your email address",'label'=&gt;false,'required'=&gt;true,'type'=&gt;'email','class' =&gt; '']) ?&gt;
  &lt;/div&gt;
  &lt;div class="inp-row"&gt;
  &lt;label for=""&gt;Password&lt;/label&gt;
  &lt;?= $this-&gt;Form-&gt;input('password',["placeholder"=&gt;"Type your password",'label'=&gt;false,'id'=&gt;"pass_change" ,'required'=&gt;true,'type'=&gt;'password','class' =&gt; '']) ?&gt;
  &lt;/div&gt;
  &lt;?= $this-&gt;Form-&gt;button(__('Sign up'));?&gt;
  &lt;?= $this-&gt;Form-&gt;end() ?&gt;
  </code></pre>
  
  <p>Function signup</p>
  
  <pre><code>$user = $this-&gt;Users-&gt;newEmptyEntity();
  if ($this-&gt;request-&gt;is('post')) {
  
  $user = $this-&gt;Users-&gt;patchEntity($user, $this-&gt;request-&gt;getData());
   if ($this-&gt;Users-&gt;save($user)) {
   $this-&gt;Flash-&gt;success(__("Your account has been created successfully."), [ 'key' =&gt; 'signup']);
          }
  
      }
  $this-&gt;set('user', $user);
  
  
  2020-05-05 23:48:32 Error: [Cake\Http\Exception\BadRequestException] `_Token` was not found in request data. in xxxxxx/vendor/cakephp/cakephp/src/Controller/Component/FormProtectionComponent.php on line 141
  Stack Trace:
  - xxxxxx/vendor/cakephp/cakephp/src/Controller/Component/FormProtectionComponent.php:95
  - xxxxxx/vendor/cakephp/cakephp/src/Event/EventManager.php:309
  - xxxxxx/vendor/cakephp/cakephp/src/Event/EventManager.php:286
  - xxxxxx/vendor/cakephp/cakephp/src/Event/EventDispatcherTrait.php:92
  - xxxxxx/vendor/cakephp/cakephp/src/Controller/Controller.php:569
  - xxxxxx/vendor/cakephp/cakephp/src/Controller/ControllerFactory.php:72
  - xxxxxx/vendor/cakephp/cakephp/src/Http/BaseApplication.php:229
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:77
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Middleware/BodyParserMiddleware.php:164
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:73
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:77
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Middleware/CsrfProtectionMiddleware.php:137
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:73
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:58
  - xxxxxx/vendor/cakephp/cakephp/src/Routing/Middleware/RoutingMiddleware.php:162
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:73
  - xxxxxx/vendor/cakephp/cakephp/src/Routing/Middleware/AssetMiddleware.php:68
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:73
  - xxxxxx/vendor/cakephp/cakephp/src/Error/Middleware/ErrorHandlerMiddleware.php:119
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:73
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Runner.php:58
  - xxxxxx/vendor/cakephp/cakephp/src/Http/Server.php:90
  - xxxxxx/webroot/index.php:40
  </code></pre>