P0 security: async backup, widget CORS, Redis auth.

937692a