diff --git a/tailbone/templates/forms/deform_buefy.mako b/tailbone/templates/forms/deform_buefy.mako
index 71684f1d..0f1ae184 100644
--- a/tailbone/templates/forms/deform_buefy.mako
+++ b/tailbone/templates/forms/deform_buefy.mako
@@ -104,6 +104,9 @@
 
   let ${form.component_studly}Data = {
 
+      ## TODO: should find a better way to handle CSRF token
+      csrftoken: ${json.dumps(request.session.get_csrf_token() or request.session.new_csrf_token())|n},
+
       ## TODO: ugh, this seems pretty hacky.  need to declare some data models
       ## for various field components to bind to...
       % if not form.readonly: