add note about the Session component needed for CSRF check
Merge pull request #328 from maxgalbu/patch-1

add note about the Session component needed for CSRF check