Use HTTP Basic Auth on all REST routes
Add an example worker script and fix the full_sync route
Let the admin change usernames
Add buttons to access the admin section for the admin user