diff --git a/modules/cabana/phase10_csrf_test.go b/modules/cabana/phase10_csrf_test.go
index 009616b7..8e0306af 100644
--- a/modules/cabana/phase10_csrf_test.go
+++ b/modules/cabana/phase10_csrf_test.go
@@ -66,14 +66,15 @@ func TestPhase10CSRF(t *testing.T) {
 			}
 		})
 	}
-	// refresh, logout, account update, avatar upload and remove, markdown preview, settings put, create, bulk-delete, bulk action,
-	// widget action, toolbar action, update, delete, record action, link,
-	// unlink, file
-	// upload, file reorder, file caption, file remove, relation child
-	// create, update and delete, pivot update, child file upload, reorder,
-	// caption and remove, plugin field type upload
-	if unsafe != 30 {
-		t.Fatalf("walked %d state-changing routes, want 30: %v", unsafe, router.order)
+	// refresh, logout, account update, avatar upload and remove, account
+	// token create and revoke, markdown preview, settings put, create,
+	// bulk-delete, bulk action, widget action, toolbar action, update,
+	// delete, record action, link, unlink, file upload, file reorder, file
+	// caption, file remove, relation child create, update and delete, pivot
+	// update, child file upload, reorder, caption and remove, plugin field
+	// type upload
+	if unsafe != 32 {
+		t.Fatalf("walked %d state-changing routes, want 32: %v", unsafe, router.order)
 	}
 
 	loginHandler := router.handlers[login]