hopefully
Other changes: - use middleware for permission checking - able to respond with emoji - log incoming requests