Added CSRF documentation