diff --git a/src/index.ts b/src/index.ts
index 4174bfd9..00d4275f 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -98,8 +98,11 @@ registerErrorRoute(router)
 // all routes registered under the /consent path are protected by CSRF
 router.use("/consent", doubleCsrfProtection)
 router.use("/consent", csrfErrorHandler(invalidCsrfTokenError))
-
 registerConsentRoute(router)
+
+// all routes registered under the /logout path are protected by CSRF
+router.use("/logout", doubleCsrfProtection)
+router.use("/logout", csrfErrorHandler(invalidCsrfTokenError))
 registerLogoutRoute(router)
 
 router.get("/", (req: Request, res: Response) => {
diff --git a/views/logout.hbs b/views/logout.hbs
new file mode 100644
index 00000000..26e6824f
--- /dev/null
+++ b/views/logout.hbs
@@ -0,0 +1,3 @@
+<div id="logout">
+  {{{card}}}
+</div>