Various Small Fixes

Fixes this PR contains:

- `offset` + `limit` parameters for `GET api/user/:userId/models`
- Redirection to previously requested page after login
- Allowing anonymous access to `POST api/users` (fix #21)
- Giving `userId` var to *ejs* renderer for every view, to help solve issue #24