using correct phase + added github link
general edits
Added security to preven random updates.

* simple config added
* ajax protected by a functioncall that needs auth
Database for project