csrf information corrected
Merge pull request #43 from whodidthis/master

Fix README re: auto client-side CSRF protection with v0.13+ (@whodidthis)