diff --git a/README.md b/README.md
index b9efba4e328..d860da4ca00 100644
--- a/README.md
+++ b/README.md
@@ -477,7 +477,7 @@ added in the [pull request #40](https://github.com/sahat/hackathon-starter/pull/
 as part of CSRF protection.
 
 ```
-input(type='hidden', name='_csrf', value='_csrf')
+input(type='hidden', name='_csrf', value=_csrf)
 ```
 
 **Note:** It is now possible to whitelist certain URLs. In other words you can