Add csrf plugins + config

electrode-csrf-jwt configuration
csrf demo endpoints plugin + configuration

config/default.json

@@ -1,5 +1,12 @@
 {
   "plugins": {
+    "electrode-csrf-jwt": {
+      "options": {
+        "secret": "shhhhhh",
+        "expiresIn": 60
+      }
+    },
+    "./server/plugins/csrf": {},
     "webapp": {
       "module": "./server/plugins/webapp",
       "options": {

server/plugins/csrf.js

@@ -0,0 +1,34 @@
+"use strict";
+/*eslint-env es6*/
+var plugin = {};
+
+/*
+  Sample endpoints to demonstrate CSRF protection via the electrode-csrf-jwt module.
+  Note the endpoints require no special configuration for protection to be enabled.
+*/
+plugin.register = function (server, options, next) {
+  /* a demo GET endpoint which will return a CSRF cookie + header */
+  server.route({
+    method: "GET",
+    path: "/1",
+    handler: function (req, reply) {
+      reply("valid");
+    }
+  });
+  /* a demo POST endpoint which will require a CSRF cookie + header */
+  server.route({
+    method: "POST",
+    path: "/2",
+    handler: function (req, reply) {
+      reply("valid");
+    }
+  });
+  next();
+};
+
+plugin.register.attributes = {
+  name: "CSRFPlugin",
+  version: "0.0.1"
+};
+
+module.exports = plugin;