refactored: added express_config, routes. atomic operation in sendPass(), have more spaces