Added csrf and sessions to web.js
added contact and messages jade files