zak
The problem is when I apply this rule, it starts to run php script twice! I figured that out, because one piece of code being processed twice. That script sets random token in database, and any time I reload the page, in database I see different token, that is being sent to browser. If I remove .htaccess rule, it works fine.