Added deprecation note about the csrf_provider and intention options.

Fix phpDocs.