Login changed to OpenID
Implemented logout + modified userlist
Changed cookie auth to uuid to avoid exposing sensitive data
ID changed from long to UUID
Protect routes with regex