Protection CSRF with express and AngularJs

app-client.js

app.factory('authInterceptor', function ($cookies) {
    return {
        // Add authorization token to headers
        request: function (config) {
            config.headers = config.headers || {};
            config.headers.post['x-csrf-token'] =$cookies['XSRF-TOKEN'];
            return config;
        }
    };
});

config-server.js

var csrf = require('csurf');
app.use(csrf());
app.use(function(req, res, next) {
    res.cookie('XSRF-TOKEN', req.csrfToken());
    next();
});