Updated CSRF FAQ

Missed value="_csrf" field.
CSRF refactoring
Removed underscore "require" from app.js. No longer used.
Merge remote-tracking branch 'origin/master'