[FIXED JENKINS-15252] Explain problems with CSRF protection

As PR to invite review of the explanation: Suggestions for improvement welcome!
Do you mean [JENKINS-22474](https://issues.jenkins-ci.org/browse/JENKINS-22474)?