SEC-2444: Convert Java Config samples to thymeleaf and tiles
SEC-2439: HttpSessionCsrfTokenRepository setHeaderName sets header instead of parameter