Turn of referer protection for SecurityServiceIT

This is covered by Csrf tests, no real need to check it here