I try to add CSRF protection to react-boilerplate:. The server part is easy (see https://medium.com/@dbillinghamuk/csrf-setup-for-expressjs-and-ssr-react-redux-app-348e65261009)