Finally wrangle dat css and precompile assets.
Whoops, those belonged in the last commit.
Use cloudfront to serve uploaded files.

(As well as assets.)