This is what I found out during a search for invalid token and Joomla 3.
Do I have to turn off caching altogether? What I see below makes suggestions that kind of defeats the purpose of trying to use the cache plugin to speed the site up. Still not sure how to resolve this, other than to turn the cache plugin OFF and Global Configuration System Cache setting to OFF.
So what do I do now to speed my site up from poor performance if I have to turn such features off?
From a thread on http://www.itoctopus.com/
http://www.itoctopus.com/invalid-token-on-joomla-login
Why are you getting this invalid token error?
Now since it’s your website and you (or your legitimate users) are trying to login (or vote, or submit a form, etc..) to it normally, then theoretically, you shouldn’t see the “Invalid Token” message. However, since you are reading this post, then you have obviously experienced it! But why? Well, there are many reasons for you to get this error, and here’s a list of the most common ones:
Expired cookie: The cookie that Joomla expects you to have has expired. Deleting your cookies and trying to login again will fix the problem.
Caching: If we had a dime on how many problems caching creates on a Joomla website, we’d be billionaires! It’s amazing how many conflicts this very useful feature creates in Joomla (maybe the future of Joomla will feature a better caching system?). There are two ways to address the caching problem:
Disable caching entirely. This is a two step process:
Login to your Joomla control panel, go to Site, Global Configuration, System, and click on “No” next to Cache under Cache Settings and
Disable the System cache plugin, by going to Extensions, Plugins, and then search for the System – Cache and click the checkbox next to it, and finally click on Disable on the top right.
Fix the code for the login (or the other feature you’re having problem with) yourself, by commenting out the check for the token. (You may need Joomla Experts to do that for you!)