Change version wording

Author: quinntracy

content/en/docs/refguide10/modeling/integration/rest-services/published-rest-services/published-rest-service/_index.md

@@ -69,17 +69,18 @@ If authentication is required, you can select which authentication methods to su
 * Select **Active session** to allow access from JavaScript inside your current application
 * Once a user has logged into the browser, the JavaScript in your app can access the REST service using the current user's session
 * [Offline-first](/refguide10/offline-first/) apps cannot use active session authentication, because they do not have sessions that stay active while the app is running
-* To prevent cross-site request forgery, the `X-Csrf-Token` header needs to be set on each request. If you're using a JS action, you need can use our API to retrieve the token.
+* To prevent cross-site request forgery, the `X-Csrf-Token` header needs to be set on each request. If you are using a JavaScript action, you can use an API to retrieve the token.
 
-Example for Mendix versions below 10.23:
+For Studio Pro versions 10.22 and below, see the following example:
 
 ```javascript
 var xmlHttp = new XMLHttpRequest();
 xmlHttp.open("GET", "http://mysite/rest/myservice/myresource", false);
 xmlHttp.setRequestHeader("X-Csrf-Token", mx.session.getConfig("csrftoken"));
 xmlHttp.send(null);
 ```
-Example for Mendix versions 10.23 and newer:
+
+For Studio Pro versions 10.23 and above, see the following example:
 
 ```javascript
 import getCSRFToken from "mx-api/session";