everything up to JSON routes, untested

middleware

add app

auth route

update readme a little

some auth cleanup

create

cleanup create

query time param

home stream

search

settings

thing-stream and thing-comment

thing-tags

cleanup auth interface and route

move type checking to validator

input validation checks

fixes

various cleanup

routes untested