replaced the 4th edition string with 6th edition pre-release, and added
mention of disable CSRF option in auth
Merge pull request #105 from timrichardson/csrf

CSRF off in Auth; replace '4th edition' with '6th edition pre-release'