csrf protection

csrf protection for developers
Needs some punctuation before "for" (could be sentence break or something less drastic)