renamed 'partials' to 'views' to be consistent with recommended conventions. re-worked server code to import external libs instead of including. added xsrf token example