Add level 1 fig settings
Update node dependencies to 0.10
Add fig for level 2
Add fig for level 3
Lock Sinatra to version before rack-protection

So it's vulnerable to CSRF