replaced wildcard with request values
added access control on all headers
..
new mongo instance for heroku
next try
changed invalid password to 401 unauthorized
added basic project storage