removed hardcoded PUBLIC_URL and added explinations for more config vars to the readme
adds ability to turn on debug mode in heroku
upgrades to newer version of httplib2 that has more root certs
don't allow caching of login stuff
users are no longer staff by default (issue #99)