added registration/login views
authentication between js and REST api is via sessions now (since it’s in the same browser anyway…)
fixed a missing static files in index.tmpl bug