add lockfile to simplify deployment
before filters to reduce duplication
use filters in all request handlers