Change CSRF description.
Change description of session management.
Some adjustment. Add header descriptions.