BasicAuthenticationRESTController generates XSRF token