Let's be careful of what characters are allowed in SMTP headers
Hopefully Nodemailer will escape as necessary
More kerfuffling with cleaning input
get /feed/:feed -- 404 > 500
/feed/* require login
User gets feedback when they enter an invalid URL