Added feature where app can request to secure return data...

- not tested...
- also, added helper text for test-api.sh
Now it is working...
Bugfix: Was not able to change user type/level