Document CSRF support.