Expand on documentation about configuration, CSRF schema, general improvements