diff --git a/views/account/login.jade b/views/account/login.jade
index 5869ee6a31..dd73045a27 100644
--- a/views/account/login.jade
+++ b/views/account/login.jade
@@ -3,7 +3,7 @@ extends ../layout
 block content
   form(method='POST')
     legend Sign In
-    input(type='hidden', name='_csrf', value=token)
+    input(type='hidden', name='_csrf', value=_csrf)
     .col-sm-8.col-sm-offset-2
       if secrets.localAuth
         .form-group
@@ -37,4 +37,4 @@ block content
       if secrets.linkedinAuth
         a.btn.btn-block.btn-linkedin.btn-social(href='/auth/linkedin')
           i.fa.fa-linkedin
-          | Sign in with LinkedIn
\ No newline at end of file
+          | Sign in with LinkedIn