Added details about CSRF