scaffold server sans sessions and update TODO