csrf protection

csrf protection for developers
This note box is confusing here because it breaks up the flow of the options. It's also indented too far. Can you move it to the end of this section or just write it as inline text somewhere?