add a secret!
missing templates
configure email backend
default from email
inactive users can log out!
missing csrf_token
todo
rm cruft
trying to fix proxies/tools
Sketching out reusable tool creation form hosted within the thing