Update README with description of XSRF