Merge pull request #17 from Newtbot/anti-csrf

redo ant csrf token

package.json

@@ -23,6 +23,7 @@
     "csurf": "^1.11.0",
     "dotenv": "^16.3.1",
     "ejs": "^3.1.9",
+    "esm": "^3.2.25",
     "express": "^4.18.2",
     "express-rate-limit": "^7.1.5",
     "express-session": "^1.17.3",
@@ -31,6 +32,7 @@
     "moment": "^2.30.1",
     "mqtt": "^5.3.3",
     "mysql2": "^3.6.5",
+    "node-fetch": "^3.3.2",
     "nodemailer": "^6.9.7",
     "otp-generator": "^4.0.1",
     "otplib": "^12.0.1",