Use csrf header instead of param
Extract security bootstrap to command
DPAC-29 fixed: Refactor auth service and Routing
Refactor
DPAC-28 add unique id to all requests