An example of how to customize which urls are covered by spring csrf protection