diff --git a/webapp/settings.php b/webapp/settings.php
index 8512f36..0462bc4 100644
--- a/webapp/settings.php
+++ b/webapp/settings.php
@@ -1320,7 +1320,8 @@ async function applySchemaUpdates() {
             headers: {
                 "Content-Type": "application/json",
                 "X-CSRF-Token": CSRF_TOKEN
-            }
+            },
+            body: JSON.stringify({ csrf_token: CSRF_TOKEN })
         });
         const data = await response.json();