SEC-2269: Fix CSRF link in appendix