initial commit
added user id to response and updated csrf
deleted app folder
changed gitignore