From 40fe3143368a7085a262b7427b228750baf29b05 Mon Sep 17 00:00:00 2001
From: Sahat Yalkabov <sakhat@gmail.com>
Date: Mon, 17 Feb 2014 19:26:43 -0500
Subject: [PATCH] Update FAQ

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 59f9ae785a..5c9fff1f2d 100644
--- a/README.md
+++ b/README.md
@@ -360,9 +360,12 @@ FAQ
 ### Why do I get `403 Error: Forbidden` when submitting a POST form?
 You need to add this hidden input element to your form. This has been added in the
 pull request [#40](https://github.com/sahat/hackathon-starter/pull/40).
+
 ```
 input(type='hidden', name='_csrf', value=token)
 ```
+You can read more about [CSRF protection middleware](http://expressjs.com/api.html#csrf) at the Express API Reference.
+
 
 ### What is `cluster_app.js`?
 From the [Node.js Documentation](http://nodejs.org/api/cluster.html#cluster_how_it_works):