Add a note re X-CSRFToken header in README