[2.9.x] Add property to enable/disable CSRF protection

Property to be used to enable disable csrf protection:

org.sonatype.nexus.csrfguard.CsrfGuardFilter.enabled
I think we should log the enabled status of this.

    log.info("CSRF protection enabled: {}", ENABLED);

... or something