isLoggedIn always ask for a csrf token

[Rebolon]

It should not require it
Symfony security should retreive the user using the session_id and let the user go to the controller.

For instance the TokenAuthenticator take the request and reject it because it doesn't find the csrf parameter token. The behavior is falsy

[Rebolon]

Not reproducable