Separating frontend from server
Added CORS Filter to allow XHR requests
Removing frontend specific code
Replaced form login through basic auth
Replaced activation link through token based activation