diff --git a/src/main/java/ch/wisv/events/ChConnectConfiguration.java b/src/main/java/ch/wisv/events/ChConnectConfiguration.java
index 08d750a7..eb146c0f 100644
--- a/src/main/java/ch/wisv/events/ChConnectConfiguration.java
+++ b/src/main/java/ch/wisv/events/ChConnectConfiguration.java
@@ -68,8 +68,7 @@ public void configure(HttpSecurity http) throws Exception {
         http
                 .cors()
                 .and()
-                .csrf().disable()
-                .authorizeRequests()
+                .csrf()
                 .and().authorizeRequests()
                     .antMatchers("/administrator/**").hasRole("ADMIN")
                     .antMatchers("/", "/management/health").permitAll()