moved docs to Resources/doc/index.md
added HH helper with csrfIsValid() method