Don't create session if there is no session yet.

Requests with no associated session are enabled without any further checks.
More importantly, session is not created in such case.
Updated method names to use positive logic for readability
Updated redirect token logic to only apply the token when redirecting to
a protected page with GET requests protected
Merge pull request #30 from jason-lindquist/resolve_token_leak_on_redirect

Resolve token leak on redirect
Merge pull request #25 from pstibrany/nosession

Don't create session if there is no session yet.
Fixed vulnerable URL parsing algorithm

URL parsing based on string matching was vulnerable to various parsing quirks in browsers. As a result, tokens could leak in links to external domains.
Small fixes
Merge pull request #31 from koto/patch-1

Javascript URL parsing vulnerabilities allowing for token leakage.
Update Owasp.CsrfGuard/conf/Owasp.CsrfGuard.js

ensure coverage of all forms
Switched from ANT to Maven as the build system.
Added build instructions to readme.md.
Merge pull request #38 from manish-in-java/master

Apache Maven port of CSRFGuard 3
Added GnuPG plugin to the build process so that artifacts can be signed for deployment to remote repositories.
Updated Maven POM files to meet Sonatype Maven Central repository sync
guidelines.
Added instructions on uploading project binaries to the Maven Central
repository.
Added instructions on using with Maven.
Merge pull request #41 from manish-in-java/master

Changes to Maven POM file in order to publish it to Maven Central
Fixed a minor issue in the readme.md with the tomcat7:run command in the instructions on building and running the test project.
Added favicon.ico to the unprotected list in the test package to prevent it from filling the log with false positives when testing.
Added favicon.ico to the unprotected list in the test package to prevent it from filling the log with false positives when testing.