title: Missing CSRF token in REST request
body: <p>I'm writing a REST API using Spring MVC. I'm trying to access a controller method via a POST request.</p>
  
  <p>I always receive a <code>403</code>error:</p>
  
  <pre><code>Invalid CSRF Token '' was found on the request parameter '_csrf' or header 'X-CSRF-TOKEN'.
  </code></pre>
  
  <p>How can I deliver a CSRF token within my REST request?
  I tried to use the <code>default security password</code> which is displayed during application startup as the value for <code>_csrf</code> but it wasn't successful.</p>
  
  <p>How can I retrieve the CSRF token and is it correct to send the token in the <code>_csrf</code> parameter?</p>