Set UP GWT XSRF Security
Merge with Master/1.6.x