added auto .less css compilation
added csrf protection middleware