When there is no ReferrerFilter config call for > /system/console/configMgr/org.apache.sling.security.impl.ReferrerFilter.json returns response with empty list of configs `[]` which causes NPE: 