Hi Christine, alternatively, add the annotation @dontverifyrequesthash to your controller action. Did you declare the form to be POST? The request hash only works correctly for POST data. Greets, Sebastian