doc(README): document CSRF token

5 jobs for branch/default in 5 minutes and 8 seconds (queued for 18 seconds)