Improved the some descriptions of CSRF in 1.0.x(feedback from master) #576

Please review #576.