diff --git a/app/controllers/attempts_controller.rb b/app/controllers/attempts_controller.rb
index cf21832e..874fb3c8 100644
--- a/app/controllers/attempts_controller.rb
+++ b/app/controllers/attempts_controller.rb
@@ -1,5 +1,6 @@
 class AttemptsController < ApplicationController
   before_action :set_attempt, only: [:edit, :update]
+  protect_from_forgery :except => [:twilio]
 
   def twilio
     render plain: params.inspect