Looking at the code base, it doesn't look like there's any CSRF protection in place. Not sure what other security issues there are but I'd be careful about usin

Looking at the code base, it doesn't look like there's any CSRF protection in place. Not sure what other security issues there are but I'd be careful about using this. You probably want some tests in there as well. Overall looks like a promising project but you might have rushed to get something in front of people when a bit more polish would have made a better first impression.