changed SecurityConfig.java

Author: sergeycherkasovv

src/main/java/hexlet/code/config/SecurityConfig.java

@@ -32,6 +32,7 @@ SecurityFilterChain securityFilterChain(HttpSecurity http, HandlerMappingIntrosp
             throws Exception {
 
         return http
+                // CSRF protection is disabled because this app uses stateless JWT-based authentication
                 .csrf(csrf -> csrf.disable())
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers("/").permitAll()