Adds csurf to and cookie-parser to manage CRSF protection.

package.json

@@ -90,6 +90,8 @@
     "chai": "^3.5.0",
     "chai-http": "^3.0.0",
     "copy-webpack-plugin": "^4.0.0",
+    "cookie-parser": "^1.4.3",
+    "csurf": "^1.9.0",
     "css-loader": "^0.25.0",
     "dialog-polyfill": "^0.4.4",
     "eslint": "^3.12.1",
@@ -120,8 +122,8 @@
     "pre-git": "^3.10.0",
     "precss": "^1.4.0",
     "pym.js": "^1.1.1",
-    "react": "15.3.2",
-    "react-dom": "15.3.2",
+    "react": "^15.3.2",
+    "react-dom": "^15.3.2",
     "react-linkify": "^0.1.3",
     "react-mdl": "^1.7.2",
     "react-mdl-selectfield": "^0.2.0",