adding simple authentication using a KEY, created lib/authenKey.js
allow access to /user without APIKEY
updates to README and package.json