adding csrf token to production environment
adding responseTime middleware to development env