diff --git a/app.js b/app.js
index 596278efcc..d93e47bdf0 100755
--- a/app.js
+++ b/app.js
@@ -77,7 +77,7 @@ app.use(passport.initialize());
 app.use(passport.session());
 app.use(function(req, res, next) {
   res.locals.user = req.user;
-  res.locals.token = req.csrfToken();
+  res.locals._csrf = req.csrfToken();
   res.locals.secrets = secrets;
   next();
 });