added dscription secure http headers #134
added <sec:csrfInput> <sec:csrfMetaTags #134
added need to post request in logout if using CSRF #134