connect middleware that stores a csrf token in a level-session store