rename index to avoid conflicts
fail if unauthd
refuse to serve site without oauth credentials