Cross-site request forgery prevention filter in GlassFish 3.1.1