Index: lams_admin/web/user.jsp
===================================================================
diff -u -r1ef1213820fe7ff7c6f4a9238b3f489a25012c63 -r40de3afab4e8d589660daffb6efd6e568e87f8fa
--- lams_admin/web/user.jsp	(.../user.jsp)	(revision 1ef1213820fe7ff7c6f4a9238b3f489a25012c63)
+++ lams_admin/web/user.jsp	(.../user.jsp)	(revision 40de3afab4e8d589660daffb6efd6e568e87f8fa)
@@ -141,20 +141,25 @@
 		}
 		
 		<c:if test="${isSysadmin}">
-		function deletePortrait() {
-			$("#portraitButton").css('display','none');
-			$.ajax({
-				url : '/lams/saveportrait/deletePortrait.do',
-				data : { 	'userId'  : '<c:out value="${userForm.userId}" />' },		
-			success : function(response) {
-				if ( response == 'deleted') {
-					loadPortrait('');
-				} else {
-					alert("<fmt:message key='error.portrait.removal.failed'/>");
-				}
+			function deletePortrait() {
+				$("#portraitButton").css('display','none');
+				
+				$.ajax({
+					url : '/lams/saveportrait/deletePortrait.do',
+					data : { 	
+						'userId': '<c:out value="${userForm.userId}" />' ,
+					  	"<csrf:tokenname/>": "<csrf:tokenvalue/>"
+					},
+					type : 'POST',		
+					success : function(response) {
+						if ( response == 'deleted') {
+							loadPortrait('');
+						} else {
+							alert("<fmt:message key='error.portrait.removal.failed'/>");
+						}
+					}
+				});
 			}
-		});
-		}
 		</c:if>
 		</c:if>
 	</script>