move response creation to response class
run tests on make
use bandit as submodule