diff --git a/src/Controller/AppController.php b/src/Controller/AppController.php
index 1b0933342..40b1bf4bd 100644
--- a/src/Controller/AppController.php
+++ b/src/Controller/AppController.php
@@ -28,7 +28,9 @@ public function initialize()
     {
         parent::initialize();
         $this->loadComponent('Security');
-        $this->loadComponent('Csrf');
+        if ($this->request->getParam('_csrfToken') === false) {
+            $this->loadComponent('Csrf');
+        }
         $this->loadComponent('CakeDC/Users.UsersAuth');
     }
 }