read version from package.json
refactored authentication code
new authentication is starting to work
auth refactoring
expose session secret as config