SEC-2463: CSRF documentation includes EnableWebMvcSecurity