editorconfig
Simple shared secret-based auth for now
App serving route exempted from auth secret