winston logging to file, error handling & http 401 for unauthed requests