add TODOs
No need for favicon.ico

That was only useful when this was testable with a browser instead of
curl.  Also health_check should not have .html, since it's plain text.