diff --git a/app/controllers/redmine_git_hosting_controller.rb b/app/controllers/redmine_git_hosting_controller.rb
index 810be1763..6e48fdd39 100644
--- a/app/controllers/redmine_git_hosting_controller.rb
+++ b/app/controllers/redmine_git_hosting_controller.rb
@@ -54,6 +54,9 @@ def render_with_api
   def render_js_redirect
     respond_to do |format|
       format.js { render js: "window.location = #{success_url.to_json};" }
+      format.html do
+        redirect_to success_url
+      end
     end
   end
 
diff --git a/app/views/repository_deployment_credentials/edit.html.slim b/app/views/repository_deployment_credentials/edit.html.slim
index 46be48356..94d76f0e1 100644
--- a/app/views/repository_deployment_credentials/edit.html.slim
+++ b/app/views/repository_deployment_credentials/edit.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_deployment_credential, @credential,
                     url: repository_deployment_credential_path(@repository, @credential),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :put, class: 'tabular', remote: true } do |f|
 
   .flash-messages = error_messages_for 'credential'
diff --git a/app/views/repository_deployment_credentials/new.html.slim b/app/views/repository_deployment_credentials/new.html.slim
index 793ced7c6..4b27def9f 100644
--- a/app/views/repository_deployment_credentials/new.html.slim
+++ b/app/views/repository_deployment_credentials/new.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_deployment_credential, @credential,
                     url: repository_deployment_credentials_path(@repository),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :post, class: 'tabular', remote: true } do |f|
 
   .flash-messages= error_messages_for 'credential'
diff --git a/app/views/repository_git_config_keys/edit.html.slim b/app/views/repository_git_config_keys/edit.html.slim
index b32bc0dab..b54bdf35e 100644
--- a/app/views/repository_git_config_keys/edit.html.slim
+++ b/app/views/repository_git_config_keys/edit.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_git_config_key, @git_config_key,
                     url: repository_git_config_key_path(@repository, @git_config_key),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :put, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_git_config_keys/new.html.slim b/app/views/repository_git_config_keys/new.html.slim
index 4c7bdac7a..696015367 100644
--- a/app/views/repository_git_config_keys/new.html.slim
+++ b/app/views/repository_git_config_keys/new.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_git_config_key, @git_config_key,
                     url: repository_git_config_keys_path(@repository),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :post, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_git_extras/move.html.slim b/app/views/repository_git_extras/move.html.slim
index e26de7ccd..329e25962 100644
--- a/app/views/repository_git_extras/move.html.slim
+++ b/app/views/repository_git_extras/move.html.slim
@@ -3,6 +3,7 @@ h2 = l(:label_move_repository, repo_name: @repository.gitolite_repository_name)
 .box
   = labelled_form_for :repository_mover, @move_repository_form,
                       url: move_repository_git_extras_path(@repository),
+                      authenticity_token: form_authenticity_token,
                       html: { method: :post, class: 'tabular', data: { confirm: l(:text_are_you_sure) } } do |f|
 
     .flash-messages = error_messages_for 'move_repository_form'
diff --git a/app/views/repository_mirrors/edit.html.slim b/app/views/repository_mirrors/edit.html.slim
index 7c584e00b..a8f13dc11 100644
--- a/app/views/repository_mirrors/edit.html.slim
+++ b/app/views/repository_mirrors/edit.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_mirror, @mirror,
                     url: repository_mirror_path(@repository, @mirror),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :put, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_mirrors/new.html.slim b/app/views/repository_mirrors/new.html.slim
index 2f2c311f8..c8a823f69 100644
--- a/app/views/repository_mirrors/new.html.slim
+++ b/app/views/repository_mirrors/new.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_mirror, @mirror,
                     url: repository_mirrors_path(@repository),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :post, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_post_receive_urls/edit.html.slim b/app/views/repository_post_receive_urls/edit.html.slim
index 912079a73..5fa3ad949 100644
--- a/app/views/repository_post_receive_urls/edit.html.slim
+++ b/app/views/repository_post_receive_urls/edit.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_post_receive_url, @post_receive_url,
                     url: repository_post_receive_url_path(@repository, @post_receive_url),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :put, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_post_receive_urls/new.html.slim b/app/views/repository_post_receive_urls/new.html.slim
index 442db5808..1dca07b40 100644
--- a/app/views/repository_post_receive_urls/new.html.slim
+++ b/app/views/repository_post_receive_urls/new.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_post_receive_url, @post_receive_url,
                     url: repository_post_receive_urls_path(@repository),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :post, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_protected_branches/edit.html.slim b/app/views/repository_protected_branches/edit.html.slim
index daa4dc4c6..52dce6fc1 100644
--- a/app/views/repository_protected_branches/edit.html.slim
+++ b/app/views/repository_protected_branches/edit.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_protected_branche, @protected_branch,
                     url: repository_protected_branch_path(@repository, @protected_branch),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :put, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }
diff --git a/app/views/repository_protected_branches/new.html.slim b/app/views/repository_protected_branches/new.html.slim
index 2bd5dec4a..8424a5b47 100644
--- a/app/views/repository_protected_branches/new.html.slim
+++ b/app/views/repository_protected_branches/new.html.slim
@@ -1,5 +1,6 @@
 = labelled_form_for :repository_protected_branche, @protected_branch,
                     url: repository_protected_branches_path(@repository),
+                    authenticity_token: form_authenticity_token,
                     html: { method: :post, class: 'tabular', remote: true } do |f|
 
   = render partial: 'form', locals: { f: f }