Fix a typo in CSRF docs
Merge pull request #3305 from benmccann/csrf-typo

Fix a typo in CSRF docs