Greatly improved REST API.

- Individual fields of related objects can be embedded.
- Sorting is available for most GET operations on collections.
- Access control for GET requests.
- Improved documentation.
- User and customer passwords can be set.
- Missing required fields are reported.
- Implemented some missing REST methods.
Field selection in REST API of timesheet extension.
Make use of recent API improvements in the UI.