some restucturing of the project
introduced authHandler middleware
starting to use authtoken for api/blog (WIP)