Add CSRF explanation.
Fix line breaks.
More references.