merges Brendon's service layer additions and related changes to routes
moves app configuration to package.json from config/express.js
implements hooks for authentication middleware, but currently forwards all routes pending definition of auth policy