put token into request headers automatically
fix app lib autoloading
make a couple semi-useful handlers
use extended Slim App