'App.view.desktop.BackendTools': suffle things to load this after auth

commit ebbff59389f97c0e7c4fc58ff3b17b1076213298 fixes bug that
allowed to load protected components without session

explicitly protected component 'App.view.desktop.BackendTools'
was loaded before auth and thus now is't available

fix that by suffling initial loading of components

* also move `App.sts()` into `extjs_load->add_app_status()`
  out of `App.store.Status`

Signed-off-by: Oleg Verych <olecom@gmail.com>
_devel_backend.cmd: pass argument to sh

Signed-off-by: Oleg Verych <olecom@gmail.com>