diff --git a/app/.htaccess b/app/.htaccess
index 64b43ad14..fdf576482 100644
--- a/app/.htaccess
+++ b/app/.htaccess
@@ -278,7 +278,7 @@ AddDefaultCharset utf-8
 # see the specification: http://w3.org/TR/CSP).
 
 # <IfModule mod_headers.c>
-#    Header set Content-Security-Policy "script-src 'self'; object-src 'self'"
+#    Header set Content-Security-Policy "script-src 'self' https://accounts.google.com/gsi/client; object-src 'self'"
 #    <FilesMatch "\.(appcache|crx|css|eot|gif|htc|ico|jpe?g|js|m4a|m4v|manifest|mp4|oex|oga|ogg|ogv|otf|pdf|png|safariextz|svg|svgz|ttf|vcf|webapp|webm|webp|woff|xml|xpi)$">
 #        Header unset Content-Security-Policy
 #    </FilesMatch>
diff --git a/app/scripts/components/GoogleLogin/GoogleLogin.tsx b/app/scripts/components/GoogleLogin/GoogleLogin.tsx
index 0d66041d4..d6b690eac 100644
--- a/app/scripts/components/GoogleLogin/GoogleLogin.tsx
+++ b/app/scripts/components/GoogleLogin/GoogleLogin.tsx
@@ -40,6 +40,7 @@ const GoogleLogin = ({ $http, $document, envService }: GoogleLoginProps) => {
       <>
         <div
           id="g_id_onload"
+          data-use_fedcm_for_prompt="true"
           data-client_id={clientId}
           data-auto_prompt="true"
           data-nonce={googleNonce}