Widens CSRF regex for rest interface to ^/rest/[a-zA-Z0-9/]*$