Add a word on URL-encoding CSRF tokens when needed

Hi!
This is a minor addition related to the issue I posted at https://github.com/balderdashy/sails/issues/2266.
Just in case someone else has the same problem in the future.
Thanks @sgress454 for your help.