diff --git a/_define.php b/_define.php
index c5bd2cd..4d53550 100644
--- a/_define.php
+++ b/_define.php
@@ -30,5 +30,5 @@
 );
 
 $this->setCsrfExclusions([
-    '/oauth2_*/',
+    '/oauth2_(token|user)/',
 ]);
diff --git a/templates/default/oauth2_authorize.html.twig b/templates/default/oauth2_authorize.html.twig
index cab0d0a..e5e92bd 100755
--- a/templates/default/oauth2_authorize.html.twig
+++ b/templates/default/oauth2_authorize.html.twig
@@ -22,7 +22,6 @@
     {% endfor %}
                 <br/>
 
-                {% include "components/forms/csrf.html.twig" %}
 
                 <div class="ui two column grid">
                     <div class="column center aligned">