default the config location to Owasp.CsrfGuard.properties so it doesnt
have to be specified in the web.xml