After replacing project, CSRF token mismatch occurs

Server 1: CakePHP 3.6.13 / PHP 7.2 / Ubuntu 16.04 LTS
Server 2: CakePHP 3.7.2 / PHP 7.2 / Ubuntu 18.10

The project is running on Server1.
Copy only project_home/src and project_home/webroot to the project of Server 2.
In Server2, CSRF token mismatch occurs.

What is the cause?