adds API authentication and authorisation (At least for the expense_report)
Merge branch 'feature/expense-report-take-2' of https://github.com/danevron/hours-report-app into feature/expense-report-take-2
Adds target “_self” to make the link hit the server
fixes a bug in the edit page authorisation