Original files testing static, csrf and other features.  Uses ejs, too.