diff --git a/lib/classes/CSRFProtection.php b/lib/classes/CSRFProtection.php
index 56d6e4cc836786841ba34b02fe982fcadd01573b..9afc6239d2ecd08705d25bb3656f7dfa75946191 100644
--- a/lib/classes/CSRFProtection.php
+++ b/lib/classes/CSRFProtection.php
@@ -69,7 +69,7 @@ class CSRFProtection
                 throw new SessionRequiredException();
             }
 
-            self::$storage = $_SESSION;
+            self::$storage =& $_SESSION;
         }
         return self::$storage;
     }