CSRF protection example app built with Express and Angular