diff --git a/app.js b/app.js
index eb515a0f1..7a05f81df 100644
--- a/app.js
+++ b/app.js
@@ -73,7 +73,7 @@ app.use(session(session_opts));
 app.use(cookieParser());
 
 app.use((err, req, res, next) => {
-  if (req.method === 'POST') {
+  if (req.method === 'POST' || req.method === 'PUT' || req.method === 'DELETE') {
     res.locals._csrf = req.csrfToken();
   }
   next();