somehow secure and convenient boilerplate code for express 4 projects