the URL is random so it's harder to crack than a password, but you're right - we'll be adding proper 'accounts' later, and some more features if necessary - it's an MVP at this stage.