doc: add notes about CSRF and Form requirements (#98)

README.md

@@ -201,6 +201,13 @@ bin/console messenger:monitor:schedule:purge --remove-orphans
 
 ## User Interface
 
+> [!NOTE]
+> `symfony/form` (`composer require symfony/form`) is required for the UI.
+
+> [!NOTE]
+> If using `symfony/scheduler` and the UI, `symfony/security-csrf` (`composer require symfony/security-csrf`) is required.
+> CSRF protection and sessions must also be enabled in your `config/packages/framework.yaml`.
+
 > [!NOTE]
 > [Storage](#storage) must be configured for this feature.
 

composer.json

@@ -41,7 +41,9 @@
     "suggest": {
         "knplabs/knp-time-bundle": "For human readable timestamps and durations on your dashboard.",
         "lorisleiva/cron-translator": "For human readable cron expressions on your dashboard.",
-        "symfony/ux-live-component": "For Live Components"
+        "symfony/ux-live-component": "For Live Components",
+        "symfony/form": "For the UI",
+        "symfony/security-csrf": "For CSRF token used in UI Ajax calls"
     },
     "config": {
         "preferred-install": "dist",