use helmet for security
rewrite express controller injection for easier middleware insertion
update deps
update packages
update readme
update version