Now APP ui is no more an entity AppClient, now is part of configuration of the api (see settings.js)
Added decodeAccessToPrivate() for check access to private areas of API.