EZP-20467: Implement REST server csrf protection for session based authentication
EZP-20467: Fixed CSRF dependency injection
EZP-20467: Read the CSRF token name from parameters
EZP-20467: Implemented the 303 response from POST /user/sessions
Added: SessionInput VO and parser
Updated: use SessionInput in createSession() action
EZP-20467: added CSRF token check before executing REST requests
Fixed: c/p in class header
Tested: SectionInput parser
Tested: Session visitor
Added: Conflict VO with visitor and test
Added: SessionInput and Conflict to dispatchers configuration
Fixed: logging in to legacy, handling 409 response
EZP-20467: Added delete session route
EZP-20467: implemented deleteSession action
EZP-20467: Removed CSRF param from session struct
EZP-20467: Make CSRF provider dependency optional
EZP-20467: Handle anonymous session, make CSRF provider dependency optional
EZP-20467: change CSRF token vector to custom header, make CSRF provider dependency optional
EZP-20467: fixed: check if authentication token is null