sit-elastic now accepts non GET requests only if authorization token is correct (currently hardcoded, will change), also sit-kibana now serves elastic too, so users can access it with their auth details