add hello endpoint for demoing basic http interaction
use chaos middleware
use 401 for unauthorized tokens
use rack-attack and redis for throttling