Update API to authorize any (non blank) password.
Start adding API to generate HTML.
Update production settings.