Merge pull request #18 from alanhamlett/master

bug in docs for CSRF_DISABLE config name