I'd try disabling the cache plugin. If you're using the SCLogin module, or any other module, check the Advanced parameters area and set the Cache option to "No Caching" as well.
Beyond that, no, I don't have any real good ideas as to what could be happening. The invalid security token is a common problem across many Joomla sites that really doesn't have one specific answer.
I hope the above helps,
Alex