Web skeleton

TODO: security, others