WORKAROUND: deactivated authentification for fetchalbumcover, closes #229
all api handlers can now be equipped with an boolean attribute "noauth". If set
to true, this will circumvent authentification.