CSRF and authentication mild rework

conf/application.conf

@@ -2,6 +2,10 @@
 
 play.http.filters=controllers.filters.Filters
 
+play.filters.csrf.header.bypassHeaders {
+    X-Requested-With = "*"
+}
+
 play.modules.enabled += "mqttClient.Module"
 
 slick.dbs.default = {

conf/routes

@@ -7,12 +7,9 @@
 GET     /                           controllers.HomeController.index()
 
 POST    /login                      controllers.authentication.SessionsController.login()
-# TODO: enable it later
-+nocsrf
 DELETE  /logout                     controllers.authentication.SessionsController.logout()
 
 # Map static resources from the /public folder to the /assets URL path
 GET     /assets/*file               controllers.Assets.versioned(path="/public", file: Asset)
 
-+nocsrf
 POST    /auctions                   controllers.AuctionsController.create()