diff --git a/app/controllers/admin/application_controller.rb b/app/controllers/admin/application_controller.rb
index d9356198f..5069322c7 100644
--- a/app/controllers/admin/application_controller.rb
+++ b/app/controllers/admin/application_controller.rb
@@ -7,6 +7,7 @@
 module Admin
   class ApplicationController < Administrate::ApplicationController
     include Pundit
+    protect_from_forgery with: :exception, prepend: true
     before_action :authorize_admin
 
     def order