diff --git a/app/templates/auth/login/show.html.erb b/app/templates/auth/login/show.html.erb
index c38d99c..baba2ab 100644
--- a/app/templates/auth/login/show.html.erb
+++ b/app/templates/auth/login/show.html.erb
@@ -11,6 +11,7 @@
     <% end %>
 
     <form action="/auth/login" method="POST">
+      <input type="hidden" name="_csrf_token" value="<%= csrf_token %>">
       <div class="form-group">
         <label for="email">Email</label>
         <input type="email" id="email" name="email" required autocomplete="email">