Added some more session-security measures.
Added (not yet used) config.json (for all sorts of configuration paramters) and an empty user-model.
Changed Server to use https instead of http.
Added a new ressource.