Brought CSRF documentation up-to-date.

* CSRF middleware moved from django.contrib to django.middleware in Django 1.4
* It is activated by default in MIDDLEWARE_CLASSES