Too much Coffeescript. Had some filters on. :)
@ -114,7 +114,7 @@ var express = require('express'),
res.locals.csrf_token = req.session._csrf;
// Disable framing
res.setHeader "X-Frame-Options", "DENY"
res.setHeader("X-Frame-Options", "DENY");
next();
});