Changed header name to X-CSRF-Token
Edited narrative docs about CSRF