Update xsrf.md

small spelling edit