small middleware improvements

- added cookieParser secret
- added explicit sequelize-restful endpoint
added directory listing