}
log.info(INIT_PARAM_AUTHENTICATE_HEADER + " = " + authenticate_header);
// read csrf protection params
String csrfParam = getInitParameter(INIT_PARAM_CSRF_PROTECTION);
csrfUtil = new CSRFUtil(csrfParam);
log.info(INIT_PARAM_CSRF_PROTECTION + " = " + csrfParam);
//create absolute URI hrefs..
String param = getInitParameter(INIT_PARAM_CREATE_ABSOLUTE_URI);
if (param != null) {