Added doc for new form csrf method

Signed-off-by: Derek Myers <arcticpro@gmail.com>
Change CSRF in security docs to use new form csrf method