add note about enabling csrf validation
minor change to document formatting
fixes #548
Merge pull request #552 from pawl/master

Add documentation about enabling CSRF validation