 +    if not _compare_tokens(token, existing_token):
 +        raise CsrfTokenValidationError()
 diff --git a/ckan/lib/helpers.py b/ckan/lib/helpers.py
-index f564c9054..b3135ab5c 100644
+index 851ffaa60..3c3ddfd3d 100644
 --- a/ckan/lib/helpers.py
 +++ b/ckan/lib/helpers.py
 @@ -44,6 +44,7 @@ import ckan.lib.uploader as uploader

 
 from ckan.lib.pagination import Page
 from ckan.common import _, ungettext, c, g, request, session, json
@@ -2846,6 +2847,11 @@ def clean_html(html):
     return bleach_clean(text_type(html))
 
 

@@ -11,6 +12,7 @@
         <p>{{ _('Are you sure you want to delete organization - {name}?').format(name=group_dict.name) }}</p>
         <p class="form-actions">
           <form id="organization-confirm-delete-form" action="{{ h.url_for(group_type + '.delete', id=group_dict.id) }}" method="post">
+            {{ form.hidden('csrf-token', h.generate_csrf_token()) }}
             <button class="btn btn-danger" type="submit" name="cancel" >{{ _('Cancel') }}</button>
             <button class="btn btn-primary" type="submit" name="delete" >{{ _('Confirm Delete') }}</button>
