Thanks for the feedback. You're right, I need to tie up some loose ends with the auth. Show HN asked that I don't implement restrictions on users trying out the app, and not requiring auth is a good traffic booster. Already implemented a firewall and actively blocking 2M requests.