server: use custom logger function with blacklist

Fixes #85.

Also moves the route logging to logrus instead of log.Logger and turns off serving static files.