[fix] check user type
[add] domain to config
[add] app
[add] get token in auth
[add] secure: prevent show site in frame
[add] loader issues
[add] token in template
[add] some secure issues
[fix] check user type
[add] csrf check
Bump version
Merge branch 'release/1.3.0' into develop