Adding CR status text for webappsec.

Sometimes specs hit CR. Who knew?!
Merge pull request #209 from mikewest/status

Adding CR status text for webappsec.