Flash a warning if no file provided to plot, add CSRF protection
Removed extraneous app creation
Added a warning for max file size