And another guy recommended a webserver framework => hapi -.-
Renaming the webroot folder to static + serving statics.
Following callback's best practices.
Login/Out functional for now. Gotta check on security stuff.
Models rewrite to valid callback(error, result) style.
Version Bump to HAPI 2.0 + valid redirect to / on loginfail.

Also: Giving the login proccess some time to fire for not letting the
users guess which part of a login proccess failed exactly.
Flash messages wont work out of the box any way.
Hapi is unbelievably much more fun than the rest.
This redirecting / travelogue stuff hurts.