diff --git a/tests/e2e/helpers/api_client.py b/tests/e2e/helpers/api_client.py
index d7d31ef..fc28108 100644
--- a/tests/e2e/helpers/api_client.py
+++ b/tests/e2e/helpers/api_client.py
@@ -10,7 +10,11 @@ class PicAPIClient:
     def login(self, username: str, password: str) -> dict:
         r = self.s.post(f"{self.base}/api/auth/login", json={'username': username, 'password': password})
         r.raise_for_status()
-        return r.json()
+        data = r.json()
+        csrf = data.get('csrf_token', '')
+        if csrf:
+            self.s.headers['X-CSRF-Token'] = csrf
+        return data
 
     def logout(self):
         self.s.post(f"{self.base}/api/auth/logout")