Better CSRF documentation.