chore: move usage of lusca csrf before serving of files with .get()

src/service/index.js

@@ -50,10 +50,10 @@ const start = async () => {
   app.use(express.urlencoded({ extended: true }));
   app.use('/', routes);
   app.use('/', express.static(absBuildPath));
+  app.use(lusca.csrf());
   app.get('/*', (req, res) => {
     res.sendFile(path.join(`${absBuildPath}/index.html`));
   });
-  app.use(lusca.csrf());
 
   _httpServer.listen(uiPort);