Add a note to the installation documentation about the CSRF_COOKIE_SECURE setting.

See for more information:

https://docs.djangoproject.com/en/dev/ref/settings/#std:setting-CSRF_COOKIE_SECURE