[dist] memcache is not required to keep session data
[api] support source update hook via token

can be used for example for a github service integration
[api] ensure that users in state deleted are not visible
[api][webui] fix (dummy) webui login handling

small refactoring
Add production frontend setup to the README
[api] fix token trigger using payloads like github.com.

use standard base64 tokens
[api] define package container via URL for service trigger
[webui] increase coverage by removing functions