New release, dropping the GET calls the alter pin states as this was causing issues with browser 'remembering' urls.
The initial page is now informational only, /control will bring up the control page - using fetch api calls to alter states.
This page is now protected by basic auth - defined in the netconfig.py file.