Use waitress instead of paste for serving production.
Use GitHub oauth token for API auth.