diff --git a/pkg/server/xsrf.go b/pkg/server/xsrf.go
index a3748ac..7cc4d3d 100644
--- a/pkg/server/xsrf.go
+++ b/pkg/server/xsrf.go
@@ -22,11 +22,11 @@ func genKey(length int) (bytes []byte) {
 
 func newXsrf(secret []byte) string {
 	rnd := genKey(keySize)
-	return base64.RawStdEncoding.EncodeToString(append(rnd, xor(rnd, secret)...))
+	return base64.RawURLEncoding.EncodeToString(append(rnd, xor(rnd, secret)...))
 }
 
 func checkXsrf(xsrf string, secret []byte) bool {
-	t, err := base64.RawStdEncoding.DecodeString(xsrf)
+	t, err := base64.RawURLEncoding.DecodeString(xsrf)
 	if err != nil {
 		return false
 	}