add npm-run-all for cross platfrom capability

Simple hello world that will display in the browser
when the user visits the localhost url.

Fix security issues