Rename server.js to app.js.
Add 404 and error handling middleware.

Add cors package.
Add /users/me route to identify from auth token.

User passwords are stored with bcrypt hash & salt.
The authentication token is stored in the 'x-access-token' header.

For tests open mongodb port and access directly (without docker)