[Book][Validation] validate method in Validator returns ContraintViolationList object not an array
applies WouterJ suggestion
Small fixes
Documented CSRF protection in login forms
Added references
Fixed comments
Updated toctree and index
Merge pull request #3327 from WouterJ/issue_3059

Documented CSRF protection in login forms