Added documentation for XSS and CSRF attacks.