moved authentication to GET requests only.
removed logging.js middleware