skeleton

Merge pull request #4 from sanderdlm/upstream/middleware-and-config-providers

Add Config providers, security middleware, body parser, and CSRF protection

clean up

fix test

jwt sessions by default