verifier now responds to requests to / and to /verify.  in production we're routing verify calls to the latter (via nginx).  closes #67