configuration of JMS client, spring security for webapp using csrf