Fixes to README and additional info on CSRF filter