edit gemlock
heroku secret key
add front controller
redirect if logged in