diff --git a/app/rest/auth/provider.go b/app/rest/auth/provider.go
index 5e659027..cbf2b31d 100644
--- a/app/rest/auth/provider.go
+++ b/app/rest/auth/provider.go
@@ -177,7 +177,7 @@ func (p Provider) authHandler(w http.ResponseWriter, r *http.Request) {
 	xsrfToken := p.randToken()
 	session.Values["xsrf_token"] = xsrfToken
 
-	xsrfCookie := http.Cookie{Name: "XSRF-TOKEN", Value: p.randToken(), HttpOnly: false, Path: "/",
+	xsrfCookie := http.Cookie{Name: "XSRF-TOKEN", Value: xsrfToken, HttpOnly: false, Path: "/",
 		MaxAge: 3600 * 24 * 365, Secure: true,
 	}
 	http.SetCookie(w, &xsrfCookie)