csrf protection

csrf protection for developers
This would read better as: "Requests that write data to the server should only use methods such as
+POST, PUT and DELETE. These requests can then be protected as follows: