Removed extra app.use(express.csrf());