Update mat/war/WEB-INF/applicationContext-security.xml

Added the following line, 
<intercept-url pattern="/mat/**" access="isAuthenticated()" requires-channel="https" />
to make sure that the export operation URL's are also under authentication.