diff --git a/TODO.md b/TODO.md
index bdfaf3c..47c0fea 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,3 +1,5 @@
+- auth middleware lol
+- move request logging out of the request handling into a middleware
 - nginx role
 - think about choosing the master for the keepalive message (should be somewhat load-balanced)
 - hivemind lite should not just print `hivemind-lite` lol