updated todo list
* security bugfix, so that not approved users cannot forge their cookies
* new route for /static/css/, css on register and auth rendered
started working on fileserver
first version of fileserver completed
videoplayer now also plays vtt subtitles, if they are present and have the same name
added files.html
little fix for webm in type and subtitles support