Remove unused imports.
Document the `csrf()` helper function.