CSRF protection

The [docs](https://docs.nestjs.com/security/csrf#use-with-express-default) say that the [csurf](https://github.com/expressjs/csurf#csurf) package which is used for CSRF protection is deprecated. There are other alternatives for this kind of attacks however, which should be researched and possibly implemented in the project.