Add note about changes to protect_from_forgery