Secure session and contacts ids
REST intercase changes
Chat buffers and message length limit
Session auth token
Debug flag in bottle plugin
Session start moved to /auth