add config, simply $API_URI
plug $READ_ONLY into config
make finding route from screen stricter
lock down crud service fns when read-only
ensure deploy is clean