visionmedia/express — Issue #986: csrf always give Forbidden page
Author: panosru
Created: 2012-01-31 21:19:50+00:00
State: open

Hi, no matter what but csrf always gives me Forbidden even if I post a form.

in my app configuration block I have this:

```js
app.use(express.cookieParser());
app.use(express.session({ secret: $settings.app.session.secret }));
app.use(express.csrf());
```

inside my form I have this `input(type='hidden', name='csrf', value=csrf_token)`

What I'm doing wrong here?

Thanks