Fix misspelling of csrf

This will fix http://www.senchalabs.org/connect/csrf.html, right? (I have no idea!)
Merge pull request #867 from brian-pantano/patch-1

Fix misspelling of csrf