Fix CSRF glossary reference markup