doc(README): document CSRF token

4 jobs for topic/default/cw-csrf-support in 3 minutes and 23 seconds (queued for 26 seconds)