EZP-20467: Implement REST server csrf protection for session based authentication