EZP-20467: Added delete session route
EZP-20467: implemented deleteSession action
EZP-20467: Removed CSRF param from session struct
EZP-20467: Make CSRF provider dependency optional
EZP-20467: Handle anonymous session, make CSRF provider dependency optional
EZP-20467: change CSRF token vector to custom header, make CSRF provider dependency optional