Submit custom tasks using json instead of usual form post.
Add CSRF Filter.

Configures a request filter that checks for a specific header to prevent CSRF attacks
when invoking jaxrs endpoints.
In the next major this should enabled by default.