fix for: https://issues.apache.org/jira/browse/AMQ-2740 Fix for NPE indicate possible CSRF attack instead.