fix: setting CSRF Token for only rendering SPA

api/src/routes/web/index.ts

@@ -6,11 +6,6 @@ const router = express.Router()
 
 router.use(csrfProtection)
 
-router.use(function (req, res, next) {
-  res.cookie('XSRF-TOKEN', req.csrfToken())
-  next()
-})
-
 router.use('/', webRouter)
 
 export default router