docs issue #5377: add new cgi.cfg option "disable_cmd_cgi_csrf_protection"