EZP-20467: Fixed CSRF dependency injection
EZP-20467: Read the CSRF token name from parameters
EZP-20467: Implemented the 303 response from POST /user/sessions