NEWS entry for the soprovidercsrf.py fix