Add XSRF protection
Add Angular Item service and update controller