GEOSERVER_CSRF_WHITELIST yourdomain.com