DATAREST-980 - HAL browser not working behind zuul with csrf protection

[javiersvg]

• [x] You have read the Spring Data contribution guidelines.
• [x] There is a ticket in the bug tracker for the project in our JIRA.
• [x] You use the code formatters provided here and have them applied to your changes. Don’t submit any formatting related changes.
• [x] You submit test cases (unit or integration tests) that back your changes.
• [x] You added yourself as author in the headers of the classes you touched. Amend the date range in the Apache license header if needed. For new types, add the license header (copy from another file and set the current year only).

[pivotal-issuemaster]

@javiersvg Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.

[pivotal-issuemaster]

@javiersvg Thank you for signing the Contributor License Agreement!

[gregturn]

@javiersvg What are the odds you could submit a small github repo containing a demo of this issue/solution for me to verify against?

[javiersvg]

I will submit one with the issue and then try to work it in a way that we can apply the solution in it.

[javiersvg]

This repository shows an example of this issue: https://github.com/javiersvg/hal-browser-zuul-issue-demo

This repository has a branch named DATAREST-980 branch with the proposed solution applied.