Description

This PR adds the missing withXSRFToken option to the Request Config documentation.

The withXSRFToken configuration option exists in Axios but is not currently documented in the official Request Config section. This update ensures the documentation accurately reflects the available configuration options.

Changes Made

• Added documentation entry for withXSRFToken
• Maintained formatting consistency with existing config options

Related Issue

Closes #7450

Summary by cubic

Adds the missing withXSRFToken option to the Request Config docs and explains how it works with withCredentials. Aligns the README with current Axios behavior and includes a small example.

Description

• Documented withXSRFToken (default, true/false, function callback).
• Clarified separation from withCredentials and how to send XSRF headers on cross-origin (set both).
• Added a usage example.
• Reason: option exists in Axios but was not documented, causing confusion.

Testing

• Docs-only change; no tests added or needed.

^{Written for commit 9349693. Summary will update on new commits.}