diff --git a/ChangeLog b/ChangeLog
index 3fe3b834d175650aff5c1f9ce738f04727541752..8584d47b8cef8add0662577c40c0e45a6cb04e4a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,7 +10,8 @@ train-2011.08.18:
   * all files created at execution time are now in one location:  #172	
   * developer ergonomics - improved colorized logging with terse webserver output to console
   * always require a user to authenticate if they don't have an active session: #74
-	
+  * improved CSRF protection to fix race conditions in previous train: #173
+		
 train-2011.08.12:
   * massive zero-user-visibile refactoring of dialog javascript.
   * fix cancel button in "waiting for verification state" (issue #147)