simple and incomplete auth mechanism
attempt to add codemirror and use noko to format html