Index: lams_admin/web/integration/ltiConsumer.jsp
===================================================================
diff -u -r63bee30ea13fab1267c0744f26929af1736a1cf9 -rcdfd865f5b09b49251732b2de7456ba7c09192bb
--- lams_admin/web/integration/ltiConsumer.jsp	(.../ltiConsumer.jsp)	(revision 63bee30ea13fab1267c0744f26929af1736a1cf9)
+++ lams_admin/web/integration/ltiConsumer.jsp	(.../ltiConsumer.jsp)	(revision cdfd865f5b09b49251732b2de7456ba7c09192bb)
@@ -20,7 +20,6 @@
 	<script type="text/javascript" src="<lams:LAMSURL/>includes/javascript/jquery.validate.js"></script>
 	<script type="text/javascript">
 		$(document).ready(function(){
-	
 			// validate signup form on keyup and submit
 			var validator = $("#ltiConsumerForm").validate({
  				rules: {
@@ -51,10 +50,10 @@
 				<fmt:message key="label.manage.tool.consumers" />
 			</a>
 		</p>
-					
+
 		<lams:errors path="*"/>
-				
 		<form:form action="save.do" id="ltiConsumerForm" modelAttribute="ltiConsumerForm" method="post">
+			<input type="hidden" name="<csrf:tokenname/>" value="<csrf:tokenvalue/>"/>
 			<form:hidden path="sid" />
 						
 			<table class="table table-no-border">
@@ -101,7 +100,8 @@
 				<tr>
 					<td><fmt:message key="sysadmin.lessonFinishUrl" />:</td>
 					<td>
-						${lessonFinishUrl}
+						<form:hidden path="lessonFinishUrl"/>
+						<c:out value="${ltiConsumerForm.lessonFinishUrl}"/>
 					</td>
 				</tr>
 				<tr>