A list of things that should be done, in no particular order.
* internal caching
* returning correct caching headers
* returning correct content-type headers
* directory router
* better routing of get vs post
* logging
* documentation
* authentication / authorisation / session handling