doh strict mode
shore up the hapi bell configs
correctly configure auth check to avoid infinite redirect loop
add dummy front-end code to be replaced
super ugly / barely works...but works