Index: lams_central/conf/security/Owasp.CsrfGuard.properties
===================================================================
diff -u -r5bce4b0fa8cea7d6e15c7373ef618506f6e80533 -rea8ad137bc60b854b46ff2dad8a573a648ae6bb9
--- lams_central/conf/security/Owasp.CsrfGuard.properties	(.../Owasp.CsrfGuard.properties)	(revision 5bce4b0fa8cea7d6e15c7373ef618506f6e80533)
+++ lams_central/conf/security/Owasp.CsrfGuard.properties	(.../Owasp.CsrfGuard.properties)	(revision ea8ad137bc60b854b46ff2dad8a573a648ae6bb9)
@@ -71,6 +71,7 @@
 org.owasp.csrfguard.protected.gradebookUpdateUserActivityData=/lams/gradebook/gradebookMonitoring/updateUserActivityGradebookData.do
 org.owasp.csrfguard.protected.gradebookUpdateUserLessonData=/lams/gradebook/gradebookMonitoring/updateUserLessonGradebookData.do
 
+org.owasp.csrfguard.protected.monitoringAddLesson=/lams/monitoring/monitoring/addLesson.do
 org.owasp.csrfguard.protected.monitoringArchiveLesson=/lams/monitoring/monitoring/archiveLesson.do
 org.owasp.csrfguard.protected.monitoringUnarchiveLesson=/lams/monitoring/monitoring/unarchiveLesson.do
 org.owasp.csrfguard.protected.monitoringSuspendLesson=/lams/monitoring/monitoring/suspendLesson.do
Index: lams_central/web/addLesson.jsp
===================================================================
diff -u -rae4e7fd3d6b21cb7f41a733565442950cdd9d232 -rea8ad137bc60b854b46ff2dad8a573a648ae6bb9
--- lams_central/web/addLesson.jsp	(.../addLesson.jsp)	(revision ae4e7fd3d6b21cb7f41a733565442950cdd9d232)
+++ lams_central/web/addLesson.jsp	(.../addLesson.jsp)	(revision ea8ad137bc60b854b46ff2dad8a573a648ae6bb9)
@@ -62,7 +62,7 @@
 </div>
 
 <form id="lessonForm" action="<lams:LAMSURL/>monitoring/monitoring/addLesson.do" method="POST">
-
+<input type="hidden" name="<csrf:tokenname/>" value="<csrf:tokenvalue/>"/>
 <lams:Page type="navbar">
 		<lams:Tabs>
 			<lams:Tab id="1" key="label.tab.lesson" />
@@ -361,4 +361,4 @@
 
 
 </body>
-</lams:html>
\ No newline at end of file
+</lams:html>
Index: lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/MonitoringController.java
===================================================================
diff -u -r328b2d5068eb7b9c271f43e55b3f19a05733312b -rea8ad137bc60b854b46ff2dad8a573a648ae6bb9
--- lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/MonitoringController.java	(.../MonitoringController.java)	(revision 328b2d5068eb7b9c271f43e55b3f19a05733312b)
+++ lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/MonitoringController.java	(.../MonitoringController.java)	(revision ea8ad137bc60b854b46ff2dad8a573a648ae6bb9)
@@ -289,7 +289,7 @@
 	return null;
     }
 
-    @RequestMapping("/addLesson")
+    @RequestMapping(path = "/addLesson", method = RequestMethod.POST)
     public String addLesson(HttpServletRequest request, HttpServletResponse response,
 	    @RequestParam String lessonName, @RequestParam long learningDesignID)
 	    throws IOException, ServletException, ParseException {