diff --git a/internal/pdf/service.go b/internal/pdf/service.go
index 95ad80a..4856a00 100644
--- a/internal/pdf/service.go
+++ b/internal/pdf/service.go
@@ -77,7 +77,7 @@ func (ps PdfService) BuildInvoice(b *booking.Booking, hc *config.Host) error {
 
 	payload, err := json.Marshal(data)
 	if err != nil {
-		log.Warnf("Error marshalling JSON:", err)
+		log.Warnf("Error marshalling JSON: %s", err)
 		return err
 	}
 
diff --git a/internal/server/server.go b/internal/server/server.go
index c7e5d35..5fe2fcb 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -150,6 +150,7 @@ func NewRouter(fs embed.FS, debug bool) *echo.Echo {
 	e.Use(middleware.Recover())
 	e.Use(middleware.Secure())
 	e.Use(middleware.Gzip())
+	e.Use(middleware.CSRF())
 	e.Use(sentryecho.New(sentryecho.Options{}))
 	e.Use(SentryTracingMiddleware)
 	// static assets