configurable redis client; redis session store; environment specific config files; corrected password grant middleware to include private values with account and get apps by key instead of id; removed unneeded object initializations in routes