diff --git a/app/controllers/mailkick/subscriptions_controller.rb b/app/controllers/mailkick/subscriptions_controller.rb
index <HASH>..<HASH> 100644
--- a/app/controllers/mailkick/subscriptions_controller.rb
+++ b/app/controllers/mailkick/subscriptions_controller.rb
@@ -1,5 +1,7 @@
 module Mailkick
   class SubscriptionsController < ActionController::Base
+    protect_from_forgery with: :exception
+
     before_action :set_email
 
     def show
Added protect_from_forgery - not an issue since all requests are GET, but safer for the future