add expresso test case
refactor api
add trust proxy and session cookie parser
add utils for controllers
shorten next_id() function
refactor db.js
add default session salt
add article apis
refactor auth functions