Fixed #23825 -- Added notes for the class-based-view scenario to the CSRF doc page.

https://code.djangoproject.com/ticket/23825