diff --git a/controller.go b/controller.go
index b93c4db1..491b9610 100644
--- a/controller.go
+++ b/controller.go
@@ -318,7 +318,7 @@ func (c *Controller) XsrfToken() string {
 			} else {
 				expire = XSRFExpire
 			}
-			c.Ctx.SetCookie("_xsrf", token, expire)
+			c.Ctx.SetCookie("_xsrf", token, expire, "/")
 		}
 		c._xsrf_token = token
 	}