package.json w/ underscore js
Do not send hidden pics in /event route, PoC for after login