Add CSRF protection documentation

Issue: SPR-6125