app state
Comments
Now possible to set app in protected state
Added allow-check on all non-view, non-list operations (logged in)