update schema to log failed attempts too?
Don't change port when forwarding from Oracle Cloud to norrsken; instead, do the port forwarding on norrsken
Serve the fonts myself instead of Google?