Merge pull request #257 from hasuniea/master

fixing CSRF issue in IOT server login

modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties

@@ -454,3 +454,6 @@ org.owasp.csrfguard.unprotected.JsApi=%servletContext%/portal/apis/analytics/*
 org.owasp.csrfguard.unprotected.Servlet=%servletContext%/analytics-api/*
 org.owasp.csrfguard.unprotected.ml=%servletContext%/api/login*
 org.owasp.csrfguard.unprotected.passivests=%servletContext%/acs/*
+org.owasp.csrfguard.unprotected.deviceMgtSSOAcs=%servletContext%/devicemgt/uuf/sso/acs
+org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs
+org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/invoker/execute/*