since 3.0 this annotation will be removed in 4.0.
This annotation is only required on @GET annotated resources.
Resources annotated with a mutative method such as @POST no longer
required this annotation as they are XSRF protected by default.
To exclude a resource method from XSRF protection use the
XsrfProtectionExcluded annotation.