[README] Add CSRF links

README.md

@@ -334,7 +334,7 @@ Yup, it's automatic for both Ajax and WebSockets. If the page serving your JavaS
 
 #### Security: CSRF protection?
 
-**This is important**. Sente has support, and use is **strongly recommended**. You'll need to use middleware like `ring-anti-forgery` to generate and check CSRF codes. The `ring-ajax-post` handler should be covered (i.e. protected).
+**This is important**. Sente has support, and use is **strongly recommended**. You'll need to use middleware like [ring-anti-forgery](https://github.com/ring-clojure/ring-anti-forgery) or [ring-defaults](https://github.com/ring-clojure/ring-defaults) to generate and check CSRF codes. The `ring-ajax-post` handler should be covered (i.e. protected).
 
 Please see one of the [example projects] for a fully-baked example.