diff --git a/cmsmanage/settings.py b/cmsmanage/settings.py
index 0e99e49..90026df 100644
--- a/cmsmanage/settings.py
+++ b/cmsmanage/settings.py
@@ -178,6 +178,7 @@ class Base(Configuration):
 class NonCIBase(Base):
     """required for all but CI"""
 
+    CSRF_TRUSTED_ORIGINS = values.ListValue([])
     DATABASES = values.DatabaseURLValue(environ_required=True)
     EMAIL = values.EmailURLValue(environ_required=True)
     # TODO: should validate emails