abstract away opentok from controller into own class
annotate
meetings should be locked and passworded
admin section
only can create meetings on admin side
validating password when locked was not as complicated