improves CSRF documentation
adds current user to blackhole log
bumps version string