Update xsrf.md

I found some simple grammar mistakes on this page.