no csrf for now

1 files changed, 3 insertions, 2 deletions

diff --git a/lib/server.js b/lib/server.js
index 64c19a4..b13582b 100644
--- a/lib/server.js
+++ b/lib/server.js
@@ -24,6 +24,7 @@ site.init = function(){
     name: 'panda',
     resave: false,
     saveUninitialized: true,
+    proxy: true,
     cookie: { secure: true }
   }))
   app.use(express.static( path.join(__dirname, '../public')))
@@ -54,7 +55,7 @@ site.init = function(){
   app.use(router)
   
   var csrfMiddleware = csrf()
-  router.post("*", csrfMiddleware)
+  // router.post("*", csrfMiddleware)
   router.get("/", csrfMiddleware, function(req,res){
     res.locals._csrf = req.csrfToken()
     res.render("index")
@@ -81,4 +82,4 @@ site.https = function(app){
   return server
 }
 
-module.exports = site
\ No newline at end of file
+module.exports = site