index.js

var express 	= require( 'express' );
var path 		= require( 'path' );
var logger 		= require( 'morgan' );
var bodyParser 	= require( 'body-parser' );
var app 		= express();

app.use( logger( 'dev' ) );
app.use( bodyParser.json() );

// parse various different custom JSON types as JSON
app.use(bodyParser.json({ type: 'application/*+json' }))

app.all( '/*', function( req, res, next ) {

	// CORS headers
	res.header( "Access-Control-Allow-Origin ", "*" ); 
	res.header( 'Access-Control-Allow-Methods ', 'GET,PUT,POST,DELETE,OPTIONS' );

	// Set custom headers for CORS
	res.header( 'Access-Control-Allow-Headers', 'Content-type,Accept,X-Access-Token,X-Key' );

	if ( req.method == 'OPTIONS' ) {

		res.status( 200 ).end();

	} else {

		next();

	}

}); 

// Check if the token is valid
// Only the requests that start with /api/v1/* will be checked for the token.
// Any URL's that do not follow the below pattern should be avoided unless you 
// are sure that authentication is not needed
// app.all( '/api/v1/*', [require( './middleware/validateRequest' )] );

app.use( '/', require( './routes' ) );

// If no route is matched by now, it must be a 404
app.use( function( req, res, next ) {
	var err = new Error( 'Could not decode request: JSON parsing failed' );
	//var err = new Error( 'Not Found' );
	err.status = 400;
	next( err );

});

// Start the server
app.set( 'port', process.env.PORT || 3000 );

var server = app.listen(app.get( 'port' ), function() {
	console.log( 'Server listening on port ' + server.address().port );
});