Index: lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_central/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_central/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_central/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_gradebook/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_gradebook/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_gradebook/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_learning/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_learning/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_learning/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_monitoring/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_monitoring/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_monitoring/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_assessment/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_assessment/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_assessment/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_chat/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_chat/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_chat/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_daco/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_daco/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_daco/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_doku/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_doku/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_doku/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_gmap/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_gmap/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_gmap/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_images/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_images/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_images/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_imscc/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_imscc/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_imscc/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_lamc/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_lamc/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_lamc/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_laqa/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_laqa/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_laqa/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_larsrc/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_larsrc/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_larsrc/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_leader/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_leader/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_leader/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_mindmap/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_mindmap/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_mindmap/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_nb/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_nb/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_nb/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_notebook/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_notebook/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_notebook/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_pixlr/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_pixlr/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_pixlr/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_preview/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_preview/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_preview/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_sbmt/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_sbmt/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_sbmt/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_scratchie/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_scratchie/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_scratchie/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_scribe/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_scribe/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_scribe/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_spreadsheet/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_spreadsheet/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_spreadsheet/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_survey/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_survey/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_survey/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_task/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_task/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_task/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_vote/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_vote/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_vote/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_wiki/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_wiki/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_wiki/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_tool_zoom/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_tool_zoom/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_tool_zoom/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>
Index: lams_www/web/WEB-INF/tags/OutcomeAuthor.tag
===================================================================
diff -u -r381e8076e21344e47a250d4c525e44f1c4e10399 -r94a589a4cdcb70955cff2514c6b4a1bf661109c0
--- lams_www/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 381e8076e21344e47a250d4c525e44f1c4e10399)
+++ lams_www/web/WEB-INF/tags/OutcomeAuthor.tag	(.../OutcomeAuthor.tag)	(revision 94a589a4cdcb70955cff2514c6b4a1bf661109c0)
@@ -10,6 +10,7 @@
 <%@ taglib uri="tags-fmt" prefix="fmt" %>
 <%@ taglib uri="tags-lams" prefix="lams"%>
 <%@ taglib uri="tags-function" prefix="fn" %>
+<%@ taglib uri="csrfguard" prefix="csrf" %>
 <c:set var="lams"><lams:LAMSURL/></c:set>
 
 <%-- Optional attributes. Must provide at either lessonId or toolContentId --%>
@@ -68,7 +69,7 @@
 			'select' : function(event, ui){
 				var input = $(this);
 				$.ajax({
-					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do',
+					'url' : '<lams:LAMSURL/>outcome/outcomeMap.do?<csrf:token/>',
 					'data': $.extend({
 						'outcomeId' : ui.item.value
 					}, outcomeData${outcomeTagId}),
@@ -147,4 +148,4 @@
 	<div class="voffset10">
 		<fmt:message key="outcome.authoring.existing" />: <div id="outcomeMappings${outcomeTagId}" class="outcomeMappings"></div>
 	</div>
-</lams:SimplePanel>
\ No newline at end of file
+</lams:SimplePanel>