Integrate winston

and allow a winston logger to be injected

add X-Request-Id to headers if configured