updates with material from csrf talk & exercise
updated readme with complete csrf stuff