title: Using csurf with react-server
body: <p>I would like to add <a href="https://www.npmjs.com/package/csurf" rel="nofollow noreferrer">csurf</a> as an express middleware inside the <a href="https://react-server.io/" rel="nofollow noreferrer">react-server</a> for a universal app.</p>
  
  <p>What I want to achieve is adding the csrf token to a hidden input in a form in the react component to maintain the same csrf protection flow a server-rendered website would provide, but within a SPA.</p>
  
  <p>Is this technically possible within the react-server? If so, how can I pass the csrf token that is available in the response object to the react component via the page (ideally)?</p>