Might make 404 redirect to sans / if it cant find a route tho and then falling back to 404
this makes no trailing slash the sane default but allows opt in trailing slash for certain urls

TODO:
- security headers for proper origin sandboxing
(users could store sensitive info + general namespace collisions bad)
- backfill and cdn to take load off of the main appview
this will populate a database which the appview does reads from
and will download any referenced routes (to a certain size per user)
and gc old routes