app.use(express.session()); app.use(express.csrf()); app.get('/', index); index = function(req,res,next){ res.render('index',{token: req.session._csrf}); }