diff --git a/apps/files_external/ajax/removeRootCertificate.php b/apps/files_external/ajax/removeRootCertificate.php
index a00922f4210023298491d7f8d0f9662a6711c605..f78f85b8fe4dfee31f95b8ad028b25aa0bc97fbe 100644
--- a/apps/files_external/ajax/removeRootCertificate.php
+++ b/apps/files_external/ajax/removeRootCertificate.php
@@ -1,6 +1,8 @@
 <?php
 
 OCP\JSON::checkAppEnabled('files_external');
+OCP\JSON::checkLoggedIn();
+OCP\JSON::callCheck();
 
 $view = \OCP\Files::getStorage("files_external");
 $cert = $_POST['cert'];