added ability to apply csrf filter by specifying regex