add a couple more @TODO items in the code
add alias to open canary with web security disabled