diff --git a/app/views/users/omniauth_callbacks/confirm_request.html.erb b/app/views/users/omniauth_callbacks/confirm_request.html.erb
index 9fa44acc4d9..8074820193c 100644
--- a/app/views/users/omniauth_callbacks/confirm_request.html.erb
+++ b/app/views/users/omniauth_callbacks/confirm_request.html.erb
@@ -2,9 +2,10 @@
   <h2><%= t('login.omniauth_confirm_title', provider:(t "js.login.#{params[:provider]}.name", default: params[:provider])) %></h2>
   <br/>
 
-  <%= form_tag do %>
+  <form method="post">
+    <%= hidden_field_tag :authenticity_token, form_authenticity_token %>
     <%= button_tag(type: "submit", class: "btn btn-primary") do %>
         <%= SvgSprite.raw_svg('fa-plug') %><%= t 'login.omniauth_confirm_button' %>
     <% end %>
-  <% end %>
+  </form>
 </div>