Added some comments in server.coffee
Added CSRF protection