basic xss filtering
request is a devDependency
send csp headers

 - make server in `server.js` require-able
Add a nice 404 page

uses pong.js from David Albert:
https://github.com/davidbalbert/pong.js

happy gaming!
add pong.js lib for 404 page

pong.js from David Albert:
https://github.com/davidbalbert/pong.js for the 404 page