diff --git a/app/config/security.yml b/app/config/security.yml
index a178554d..7a2bccbc 100644
--- a/app/config/security.yml
+++ b/app/config/security.yml
@@ -16,6 +16,10 @@ security:
             pattern: ^/(info|health)$
             security: false
 
+        csp_report:
+            pattern: ^/csp/report$
+            security: false
+
         saml_based:
             saml: true
             logout:
diff --git a/src/Surfnet/StepupRa/RaBundle/Controller/Vetting/YubikeyController.php b/src/Surfnet/StepupRa/RaBundle/Controller/Vetting/YubikeyController.php
index f424c758..47372450 100644
--- a/src/Surfnet/StepupRa/RaBundle/Controller/Vetting/YubikeyController.php
+++ b/src/Surfnet/StepupRa/RaBundle/Controller/Vetting/YubikeyController.php
@@ -61,9 +61,9 @@ public function verifyAction(Request $request, $procedureId)
             }
 
             if ($result->wasOtpInvalid()) {
-                $form->get('otp')->addError(new FormError('ra.verify_yubikey_command.otp.otp_invalid'));
+                $form->addError(new FormError('ra.verify_yubikey_command.otp.otp_invalid'));
             } elseif ($result->didOtpVerificationFail()) {
-                $form->get('otp')->addError(new FormError('ra.verify_yubikey_command.otp.verification_error'));
+                $form->addError(new FormError('ra.verify_yubikey_command.otp.verification_error'));
             } else {
                 $form->addError(new FormError('ra.prove_yubikey_possession.different_yubikey_used'));
             }