Finished documentation of CSRF protection. Code, documentation, and tests are all back in sync. Everything is ready to be dormant for a while, until the next round of development starts up.