add secure headers and gzip
update authentication routes
remove redundant naming convention
introduce pin codes for taking evaluations