use StringUtils for csrf filter. add tests
fix CsrfFilter factory