add some static analysis
add dev instructions to the readme
refactor client to have injectable http client
inject fake creds at top level