refactored app structure, app now served from node server's index
shabby authentication policy now enforced

WITH AN IRON FIST