Updated security.md to include default_protect_from_forgery
Updated security.md to include default_protect_from_forgery

Update security.md to note that CSRF security token is included in requests automatically when `config.action_controller.default_protect_from_forgery` is set to `true`, which is the default for newly created Rails applications.

repinel/rails,Erol/rails,Edouard-chin/rails,BlakeWilliams/rails,tjschuck/rails,rails/rails,BlakeWilliams/rails,Stellenticket/rails,yawboakye/rails,georgeclaghorn/rails,betesh/rails,MSP-Greg/rails,esparta/rails,repinel/rails,tgxworld/rails,BlakeWilliams/rails,Envek/rails,vipulnsward/rails,Stellenticket/rails,yahonda/rails,vipulnsward/rails,joonyou/rails,MSP-Greg/rails,georgeclaghorn/rails,Vasfed/rails,yalab/rails,starknx/rails,EmmaB/rails-1,Vasfed/rails,yawboakye/rails,Stellenticket/rails,MSP-Greg/rails,yalab/rails,esparta/rails,schuetzm/rails,EmmaB/rails-1,yalab/rails,starknx/rails,tgxworld/rails,georgeclaghorn/rails,Envek/rails,joonyou/rails,yahonda/rails,tjschuck/rails,Vasfed/rails,schuetzm/rails,rails/rails,Envek/rails,rails/rails,yawboakye/rails,rafaelfranca/omg-rails,georgeclaghorn/rails,BlakeWilliams/rails,Edouard-chin/rails,MSP-Greg/rails,kddeisz/rails,yahonda/rails,schuetzm/rails,eileencodes/rails,tgxworld/rails,rafaelfranca/omg-rails,joonyou/rails,vipulnsward/rails,esparta/rails,Edouard-chin/rails,kddeisz/rails,lcreid/rails,Edouard-chin/rails,kddeisz/rails,yawboakye/rails,yahonda/rails,tjschuck/rails,bogdanvlviv/rails,lcreid/rails,Erol/rails,tjschuck/rails,lcreid/rails,eileencodes/rails,kmcphillips/rails,tgxworld/rails,betesh/rails,eileencodes/rails,Vasfed/rails,joonyou/rails,vipulnsward/rails,rafaelfranca/omg-rails,Envek/rails,betesh/rails,Stellenticket/rails,starknx/rails,repinel/rails,schuetzm/rails,eileencodes/rails,esparta/rails,kddeisz/rails,repinel/rails,Erol/rails,bogdanvlviv/rails,lcreid/rails,Erol/rails,yalab/rails,bogdanvlviv/rails,kmcphillips/rails,kmcphillips/rails,bogdanvlviv/rails,rails/rails,EmmaB/rails-1,kmcphillips/rails,betesh/rails