Add authentication. Passwords need hashing and post login routing needs work. Add script to setup dev env so this thing will run outside of heroku.