Post: CSRF - explain what the server does

Cause it wasn't super-clear before.