all: wrap global mux with standard middleware

[desimone]

Describe the bug

Several middleware apply to all services and should wrap the global mux. Additionally, non-routed URLs, or services without handlers (authenticate) will bypass middleware causing unexpected behavior like missing CSP headers or missed health-checks.

Expected behavior

The global http mux should be wrapped with a standard set of middleware. Such as:

• healthcheck
• referrer
• request id
• ip
• fwd_ip
• etc

Additional context

• Provide HTTP support and insert HSTS header #90 (comment)

[desimone]

Closed by #117