prepared release
Made the CSRF-enabled detection a little more explicit