- added environment variable to disable access log (by morgan middleware)
- updated dependencies
- new headers by helmet: https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md#500---2022-01-02
- updated dev deps
- rateLimit enviromnent variable "RATE_DELAY" is not longer used and ignored
- X-Permitted-Cross-Domain-Policies: none header added, see OWASP
- added "toobusy" middleware
- added more environment variables for configuration
- added environment variables for Rate Limit setting
- added basic brute-force and DOS protection