added search-function, route-renamings, constraints for JsonMBox, rearranged functions in BoxHandler, fixed login-filter-check