issue #19290: ensureLoggedIn more
issue #19290: set up unexposed and redirector server
issue #19290: comment
issue #19290: got file route working
issue #19290: added stub for reportFromKey
issue #19290: added stub for changePassword
issue #19290: using our own authentication check