Add changelog entry for CSRF status code; remove line at EOF