SEC-2282: Polish CSRF doc