new field 'application' in leitvariable: allow separate applications, with
independent configuration, to access same database
safe default and up-to-date comment for allowed_authentication_methods
disable 'warn_if_unsaved_changes()' (for the time being), return no javascript but plain url more often
allow per-application js.js and css.css