Allows wildcard routes
Adds really bad file upload implementation
Adds redirect attack
Add ability to make unsecure payments
Adds sneaky admin menu
Adds production info so we can deploy this app