prevent unauthenticated access to the /app endpoint
*really* filter out api/ saved requests

force redirecting to the /app page when the app had made an unauthorized api call from under us
added optional per-connector deviceNickname @Updater attribute

now every Connector instance has a deviceNickname property, that will default to prettyName and then name if not explicitely specified by way of the @Updater annotation
403 on tile/timespan requests on unshared connectors
reset the grapher channels on buddy-to-access change