# \[HELP\] Cannot login, error shows "BAD CSRF"

**URL:** https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424
**Category:** Support
**Created:** [November 3, 2016, 9:08am UTC](https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424 "2016-11-03T09:08:33Z")
**Posts on this page:** 1
**Showing post:** 20

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [November 7, 2016, 4:25am UTC](https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424/20 "2016-11-07T04:25:17Z")

</div>

If you are running a reverse proxy 99.999% the issue is that you are not passing headers right to discourse.

> [@Error 403 when trying to add articles or change any options](https://meta.discourse.org/t/error-403-when-trying-to-add-articles-or-change-any-options/52491/13):
>
> Holy moly, finally! I need to add a simple line to my nginx config: proxy\_set\_header X-Forwarded-Proto https; Who could guess that? So thank you and see you!

---

_[View the full topic](https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424)._