added bcrypt to requirements
Delete csrf service
Added handling of first time login to angularjs