don't worry about signing git commits, remove dependency on gpg
add basic HTTP authorization
add CSRF protection
commit to the workspace using author info based on the HTTP authentication user
dont export drafts - stop at the first draft