receiving scraps through webmentions (but it is impossible to verify them, so don't use)
disable webmention verification
anti-abuse let's only one scrap be created at each 100 seconds
use hashcash to prevent spam

also every scrap must first get the token secret (that
changes every 100 seconds) from the server before computing
the token.
put libraries at the lib/ folder