Bring back the security middleware and move cors to a separate file

[emilos]

I've simplified the security middleware for now, can add more complex cases later I guess.

[zaiste]

@emilos great addition! I'd prefer to keep longer names for the middlewares so it's more explicit. The idea is make it beginners friendly. Let's focus on that later though.