Security/Refactoring

[lastlink]

• maybe refactor off of https://github.com/panique/huge
• want to follow best practices for security
• cleanup routes, refactor files

currently

• already hash saved pasword
• use jwt for api requests w/ changeable secret