You may want to re-upload all files for Blesta and/or check your web server configuration. I notice that the CSRF token changes on every page load, which indicates the server is recreating a session each time. It's possible your web server does not have permission to write session data.