PDF export link cannot be published to other sites...

A customer would like to be able to publish the "export to PDF" link on their web site (as a kind of "Download latest documentation" link).

This use case was satisfied by previous versions of Confluence, the addition of the XSRF token in the new PDF export bundled with Confluence 3.0 broke that use case. Now, you are always given a link that includes an "atl_token" option which must be set, and which cannot be used on another computer, or even on the same computer once your session expires.

Steps to reproduce:

1. Open a page visible to the public
2. Copy the link to the PDF export from either the "Info" page or the "Tools" menu
3. Log out (or log in as a different user)
4. Attempt to load the same link

A message will appear indicating that the security token has expired.