Spring Security CsrfFilter Accesses Session on Every Request

• [x] #11700
• [x] #11699

java.lang.RuntimeException: getSession(false)
    at example.SessionAccessedFilter$1.getSession(SessionAccessedFilter.java:25)
    at javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:244)
    at javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:244)
    at org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository.loadToken(HttpSessionCsrfTokenRepository.java:65)
    at org.springframework.security.web.csrf.LazyCsrfTokenRepository.loadToken(LazyCsrfTokenRepository.java:80)
    at org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:104)
    at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:351)