Print out request host
change host which can make calls to API
Only allow calls from proxy by checking for secret_token
Add debug statements
Read header properly
Remove debug statements
return json when access denied
fix response
Get contacts for username
Remove secret values and replace with environment variables