[ci skip] document protect_against_forgery? method