add csrf to docs

Signed-off-by: Cyrus David <apathetic012@gmail.com>