Allow to configure CSRF validation in REST endpoints using 

csrf_protection: false

attribute in route definition.

Currently to achive the same efect \EzSystems\EzPlatformRestBundle\EventListener\CsrfListener::isSessionRoute needs to be overriden

Example use cases:

• Forgot password implementation via REST