CSRF off in Auth; replace '4th edition' with '6th edition pre-release'

mention of disable CSRF option in auth.
Change