diff --git a/public/javascripts/admin_users.js b/public/javascripts/admin_users.js
index 3e4d978..6f2cf2f 100644
--- a/public/javascripts/admin_users.js
+++ b/public/javascripts/admin_users.js
@@ -40,6 +40,7 @@ const cardEvents = ["paste", "keyup"];
             user: this.dataset.user,
             name: this.dataset.property,
             value: sanitizedValue,
+            _csrf: document.getElementsByName("_csrf")[0].value,
           }),
         });
         if (response.status !== 200) {