added disk encryption, closes #1 and #7

added separate volume with encryption using cryptsetup, added storage
path, moved app and config to secure volume