Yet more cleanup
Use Friend for auth
12 factor app and all that