Reinstate /dev/csrf route and add explanatory comment GitOrigin-RevId: 48fe437040860e974ada4e22409762c74a14d394