submitForm.coffee uses sessions to rate limit a form POST route

contact.coffee

contact = (req, res)->

  SubmitUsers = mongoose.model 'submit_users'

  findObj =
    session_id: req.session.id

  SubmitUsers.findOne findObj, (err, user)->
    if(!user)
      userObj =
        session_id: req.session.id
        lastVisitedOn: Date.now()
        lastSubmissionDate: Date.now()

      newUser = new SubmitUsers userObj
      newUser.save()

      sendEmail(req, res)

    if(user)
      if user.lastSubmissionDate > Date.now() - 10000
        # not allowed to submit
        user.lastVisitedOn = Date.now()
        user.save()
        res.send({ success: false })

      else
        # allowed to submit
        user.lastVisitedOn = Date.now()
        user.lastSubmissionDate = Date.now()

        user.save()

        sendEmail(req, res)
        
  return this
        
module.exports = contact