Added default values for properties that are supposed to be defined in an external properties file
Added x-csrftoken to accepted headers to prevent an error with the OVA client
Added an API logging filter
Improved the auth token filter
Added a URL mapping for the api controller (might need to be moved to AfPersistence plugin since that's where the controller is maintained)