add install script to cp config.example.js to config.js, add env var for database url
typo
add a call to syncdb.js in the install script
require a reset token when pinging ?reset
redirect after a ?reset call