diff --git a/app/controllers/commercials_controller.rb b/app/controllers/commercials_controller.rb
index 1967d0d1..aa48a406 100644
--- a/app/controllers/commercials_controller.rb
+++ b/app/controllers/commercials_controller.rb
@@ -4,6 +4,7 @@ class CommercialsController < ApplicationController
   load_resource :conference, find_by: :short_title
   before_action :set_event
   load_and_authorize_resource through: :event
+  skip_before_action :verify_authenticity_token
 
   def create
     @commercial = @event.commercials.build(commercial_params)
diff --git a/app/controllers/schedules_controller.rb b/app/controllers/schedules_controller.rb
index 677feff0..14c8888b 100644
--- a/app/controllers/schedules_controller.rb
+++ b/app/controllers/schedules_controller.rb
@@ -2,7 +2,6 @@
 
 class SchedulesController < ApplicationController
   load_and_authorize_resource
-  protect_from_forgery with: :null_session
   before_action :respond_to_options
   load_resource :conference, find_by: :short_title
   load_resource :program, through: :conference, singleton: true, except: :index