diff --git a/core/lib/refinery/application_controller.rb b/core/lib/refinery/application_controller.rb
index <HASH>..<HASH> 100644
--- a/core/lib/refinery/application_controller.rb
+++ b/core/lib/refinery/application_controller.rb
@@ -11,7 +11,7 @@ module Refinery
                          :current_refinery_user,
                          :authorisation_manager, :authorization_manager
 
-      base.protect_from_forgery # See ActionController::RequestForgeryProtection
+      base.protect_from_forgery with: :exception # See ActionController::RequestForgeryProtection
 
       base.send :include, Refinery::Crud # basic create, read, update and delete methods
Add protect_from_forgery with: :exception