add stackHawk for security testing

[warengonzaga]

As per a representative from StackHawk, the tool works best with APIs. So this is it. Planning to add this together with CircleCI.