0.3.0: bug fixed, remove csurf middleware