ignore venv
whitelist routes in app.js
removed venv