FIX: source map support mad in direct coffee exec

Install it only if app is not executed directly in coffee (i.e. compiled js files are used via node)
Stories list view

Also changed req.query.{query,search}. Views have to be adjusted to this change.

Whole query is automatically added to view data by res.serve method.
Basic request security

If user is not authenticated then block all request except

  * GET
  * HEAD
  * POST to /authenticate/login
Error template (scary!)

Also secure-request middleware passes more data to error middleware.

The idea is to allow user to authenticate and retry request.
Participant capabilities implemented