Add some docblocks to CSRF.php