simple web application

application security measures

Revisiting: pledge(2). Now all we need is the stdio promise. Much better!