backend: add session validation check
add feed-icons placeholder index.html
block listing of several util directories; deny access to config.php
rebase translations
add support for plugins adding API methods

Conflicts:
	classes/pluginhost.php