Move templates -> views.
Add a script for precompiling CSS <- STYL.
Use CSRF middleware.
Use CSRF middleware.
Remove "goto" redirecting after auth.
Work around sequelize bug in repeated query array; replace find_ and findAll_ with .done() equivalent.
Explicitly add CSRF token to headers for delete+ajax requests.
Move admin routes into a dedicated module, and re-scope admin URLs.
Move site updating and retagging into a dedicated sudo endpoint.