bump to v1.0.2 in preparation to publish changes

Changes for configuration of "csrfSecret" key, and updating unit tests to work with express 4
Do we want to console.log this ?