docs, shorten CsrfHelper description and refer to security guide. [ci skip]