pub fn router(pool: Arc<Pool>, covers: Arc<Covers>) -> Router
/push/cover/{track}/{expires}/{sig}: public, since the extension that fetches it has no login. Anything but a valid, unexpired link is a 404.
/push/cover/{track}/{expires}/{sig}