diff --git a/templates/auth/register.html b/templates/auth/register.html
index 30916d6..e2d0d3b 100644
--- a/templates/auth/register.html
+++ b/templates/auth/register.html
@@ -26,6 +26,7 @@
                     {% endwith %}
                     
                     <form method="POST" action="{{ url_for('auth.register') }}">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                         <div class="mb-3">
                             <label for="username" class="form-label">Username</label>
                             <input type="text" class="form-control" id="username" name="username" required>
diff --git a/templates/trash/trash.html b/templates/trash/trash.html
index b7e0b34..f55bdfc 100644
--- a/templates/trash/trash.html
+++ b/templates/trash/trash.html
@@ -12,10 +12,10 @@
 {{ header(
     title="Trash",
     description="View and manage deleted files. Files in trash will be permanently deleted after 30 days.",
-    button_text="Empty Trash",
-    button_url="#",
+    button_text="Empty Trash" if current_user.is_admin else "",
+    button_url="#" if current_user.is_admin else "",
     icon="fa-trash",
-    button_class="btn-danger",
+    button_class="btn-danger" if current_user.is_admin else "",
     button_icon=""
 ) }}