add a couple post endpoints + /timelines/home

config/config.go

@@ -1,8 +1,9 @@
 package config
 
 type Config struct {
-	Core CoreConfig `toml:"core"`
-	Web  WebConfig  `toml:"web"`
+	Core     CoreConfig     `toml:"core"`
+	Web      WebConfig      `toml:"web"`
+	Security SecurityConfig `toml:"security"`
 }
 
 type WebConfig struct {
@@ -18,3 +19,8 @@ type CoreConfig struct {
 	Dev       bool   `toml:"dev"`
 	SecretKey string `toml:"secret_key"`
 }
+
+type SecurityConfig struct {
+	RestrictAPI     bool `toml:"restrict_api"`
+	PublicTimelines bool `toml:"public_timelines"`
+}