Add security middleware and notes on security aspects that need follow up.
Setup a basic application shell
Use winston for logging and remove the all router that was just there for logging requests.