EZP-22156: make CSRF provider optional
Merge pull request #680 from ezsystems/fix-EZP-22156-CSRF-provider-optional

Fix EZP-22156: make CSRF provider optional again