Bug 448417 - Disable XSRF filter by default