Add the "curl" package as an install dependency: some OS images may not include it by default.
Remove the "user" and "password" options from the "config.yaml" file. Those credentials are easily discoverable and insecure. The code still hardwires bypassing the authenticating step when deploying to staging.
Move the "maintainer" line to below the "summary" one in "metadata.yaml".
README file:
- list the currently supported web browsers; - explain the self-signed certificate workaround currently needed to make Firefox work; - anonymize the EC2 addresses.