refactor - swapped express for hapi and introduced basic auth token