Divided badges into several rows since there were too many
Fixed #5769: fixed method names in Security guide
Fixes #4827: default config for functional tests of both basic and advanced app now turns off CSRF validation while providing commented out alternative setting cookie domain to localhost
doc WIP [skip ci]