fix res.sendfile callback
add access control for web ui
switch to express 5

It's needed for the better separation between rest api and web interface.
separate web and api routers to different files
fix config file comment
refactor log and etagify middlewares
install crypt3 from npm registry
auth tokens draft
enable web interface by default
create config in xdg_config_home by default
nitpick
add scoped packages draft
reformat config file and http address messages
web: encode version strings in urls
encrypt user+pass instead of tokens for now