Update csrf_homework_grading.md

This pdf helped me with understanding how to use an XSS vulnerable page to bypass a CSRF-proof page within the same domain.