Write is_allowed-method and implemented it
Permission check for files
File list display for members only. Buttons also permission-controled
Nonce check for all requests
Added loading animation for ajax-requests
Made the file history view a bit more compact