[TASK] Protect Ajax calls of core extensions

All core extensions need to benefit from
the new Ajax API and will be CSRF protected by that.

Resolves: #57196
Releases: 6.2
Change-Id: I8f6f45fc9426a0e9ae15e61670f52b7cf9f461af
Reviewed-on: https://review.typo3.org/28654
Reviewed-by: Markus Klein
Tested-by: Markus Klein