The app and static files are served from a single domain, we don't use
cross domain requests at all so removing it locks it down to the most
restrictive state, which seems reasonable. It was initially added from
an example without true understanding of the need.
The following are in a minimal working state:
- Database schema
- Basic database interaction
- Configuration file parsing
- Command line interface
- Basic route handling for categories, auth and health
- Simple static webapp files
