Anyone else had a good look through the security lib in CI 2.0?

[eluser]johnwbaxter[/eluser]
What's going on with the CSRF stuff then hmm? Non documented, it looks for a mysterious config item that seem to be missing from the config.php file or any other config files for that matter, and it doesn't quite make sense to me.

Is it incomplete or am i missing something?