Fix a typo in CSRF docs