I have the following code in my server.js
const csrfProtection = csrf({ cookie: { httpOnly: true, secure: process.env.NODE_ENV === \'production\',