diff --git a/misc/migration_tools/koha-svc.pl b/misc/migration_tools/koha-svc.pl
index 125b79ab43..83c72a99be 100755
--- a/misc/migration_tools/koha-svc.pl
+++ b/misc/migration_tools/koha-svc.pl
@@ -107,7 +107,6 @@ sub new {
 
     my $get_resp   = $ua->get("$url/authentication");
     my $csrf_token = $get_resp->header('CSRF-TOKEN');
-    $self->{csrf_token} = $csrf_token;
 
     my $resp = $ua->post(
         "$url/authentication",
@@ -115,6 +114,10 @@ sub new {
     );
     die $resp->status_line unless $resp->is_success;
 
+    #NOTE: A successful authentication means we have a new CGISESSID and a new CSRF Token
+    $csrf_token = $resp->header('CSRF-TOKEN');
+    $self->{csrf_token} = $csrf_token;
+
     warn "# $user $url = ", $resp->decoded_content, "\n" if $self->{debug};
 
     $self->{ua} = $ua;