[FEATURE] use winston for all logging

so far it was only used for the morgan middleware, logging express routes
- expose a logger object from logger.js that should be used for logging
- append timestamp to log