diff --git a/todo.txt b/todo.txt
index 396c03af..2e800f86 100644
--- a/todo.txt
+++ b/todo.txt
@@ -96,3 +96,5 @@ options: configure per machine; configure per crypto/fiat
 - server side validation, including required
     - need to think hard about how to do required checks for scopes
 - what to do if validation fails?
+
+- need to rethink cachedConfig, don't use global variables