diff --git a/tests/testapp/application.py b/tests/testapp/application.py
index 7b2a81ee..116efc66 100644
--- a/tests/testapp/application.py
+++ b/tests/testapp/application.py
@@ -16,15 +16,15 @@
 import types
 from os import environ
 
-from flask import Flask
-from flask import request
-
 import user_profile_service
-from optimizely import logger
-from optimizely import optimizely
+from flask import CSRFProtect, Flask, request
+
+from optimizely import logger, optimizely
 from optimizely.helpers import enums
 
 app = Flask(__name__)
+# Initialize CSRF protection
+csrf = CSRFProtect(app)
 
 datafile = open('datafile.json', 'r')
 datafile_content = datafile.read()
@@ -118,7 +118,7 @@ def before_request():
 
 @app.after_request
 def after_request(response):
-    global optimizely_instance
+    global optimizely_instance  # noqa: F824
     global listener_return_maps
 
     optimizely_instance.notification_center.clear_all_notifications()