bump to v1.0.2 in preparation to publish changes

Changes for configuration of "csrfSecret" key, and updating unit tests to work with express 4