add CSRF token slide
Merge branch 'master' into gh-pages