Fixed: non-customer was unable to see homepage of other user.
Added: sample nginx conf file.
Fixed: session cookies are secure/HTTP only, info redis stored.
Added: helmet HTTP header middleware
Added: pending tests
Fixed: auth. required by default, for non-GET requests.