Start thinking about site activation
Bump express to 4.10.1 to fix url-in-parameter bug
Bump shortstop leveldb init random
Verify sites against a configurable baseURL
remove useless pipe
Stop trying to do anything fancy with json
Factor confirming into another step
Add "next" controller