Mention auto-CSRF protection