documented configuration
changed configuration key from "csrf" to "captcha" to avoid confusion
added short overview