csrf token api tests (backend-api-test)

[stingion]

https://www.baeldung.com/spring-security-csrf

https://www.baeldung.com/csrf-thymeleaf-with-spring-security

[stingion]

https://stackoverflow.com/questions/45945951/jwt-and-csrf-differences https://hackernoon.com/avoid-xss-and-csrf-attacks-in-jwt-react-golang-a-tutorial