Remove CSRFToken from docs