Better way to use csrf middlewares & updated express to 3.3.7.