diff --git a/coderd/coderd.go b/coderd/coderd.go
index 0aab4b26262ea..c8cd3742c5ec3 100644
--- a/coderd/coderd.go
+++ b/coderd/coderd.go
@@ -860,7 +860,7 @@ func New(options *Options) *API {
 				next.ServeHTTP(w, r)
 			})
 		},
-		// httpmw.CSRF(options.DeploymentValues.HTTPCookies),
+		httpmw.CSRF(options.DeploymentValues.HTTPCookies),
 	)
 
 	// This incurs a performance hit from the middleware, but is required to make sure