Update index.mdx

CSFR's are the actual attack. These cookies are used to prevent that type of attack

Author: kennyj42

src/content/docs/cloudflare-one/identity/authorization-cookie/index.mdx

@@ -101,8 +101,8 @@ The following Access cookies are essential for core functionality and cannot be
 | `CF_Authorization` (cloudflareaccess.com) | JWT stored on the team domain (`<>`) to keep users logged into Access across apps                                               | Set by customer; supports org-wide login | Yes                           | None                            |
 | `CF_Authorization` (customer domain)      | JWT stored on the app domain that grants access to that specific app                                                     | Set by customer                          | Customer choice (default: No) | Customer choice (default: None) |
 | `CF_Binding`                              | Optional cookie that protects against session hijacking by binding the token to a browser instance; never sent to origin | Matches app session                      | Yes                           | None                            |
-| `CF_Session`                              | CSRF token used on the team domain (`cloudflareaccess.com`)                                                              | 4 hours                                  | Yes                           | None                            |
-| `CF_AppSession`                           | CSRF token used per app domain, scoped to individual apps                                                                | 24 hours                                 | Yes                           | None                            |
+| `CF_Session`                              | A CSRF prevention token used on the team domain (`cloudflareaccess.com`)                                                              | 4 hours                                  | Yes                           | None                            |
+| `CF_AppSession`                           | A CSRF prevention token used per app domain, scoped to individual apps                                                                | 24 hours                                 | Yes                           | None                            |
 | `CF_Device`                               | Device identification cookie used to maintain posture checks and tie sessions to devices, typically with WARP            | Varies                                   | Yes                           | Lax                             |
 | `CF_Meta_<aud>`                           | Metadata cookie that stores app-specific context or audience info; used internally for session management and debugging  | Unknown                                  | Yes                           | None                            |