Add usage logging via middleware
Turn on built-in clickjacking middleware
Correct indentation with spaces
Use log level defaults of INFO, dev can use DEBUG
Accept multiple internal IPs via the env var