{"status":401,"message":"invalid csrf token"}

It’s not as simple as that.

There is an out of date token in your session. Hence the invalid CSRF token. (Cross Site Request Forgery). There’s a few things that can cause it but not one thing. Hence the “try again later”, is the only real answer