title: using csurf with session in express
body: <p>I'm writing a single page application with <code>MEAN stack</code>, and using <code>express-session</code> with <code>redis</code> for session management.</p>
  
  <p>I want to use scrf token in my client's cookies.</p>
  
  <p>the problem is when I add <code>csurf</code> middleware, it set a session with name <code>csrfSecret</code> in redis, but how can I send it in cookie to client?</p>
  
  <p>middlewares :</p>
  
  <pre><code> app.use(csrf({}));
  
   app.use(function(req, res, next) {
       res.cookie('csrf-token', req.csrfToken());
       return next();
   });
  </code></pre>
  
  <p>and <code>csrf-token</code> is sending to client but it don't do anything.and I receive 403 error from module.</p>
  
  <p>thank you for any answer or idea.</p>