Make NodeAdapter set request.originalUrl for compatibility with Connect middleware.
Document how to add CSRF protection using Express.