Add Cross-Site Request Forgery protection

csrf proteccion added to the routes DELETE /user/:name and POST /users