changed http.HandlerFunc to http.Handler

making it easier to inject functions like auth before real http
handlerfunc