Use multer for file uploads and csurf for csrf