Added class for handling headers
Use new header-handling class
Auth should be working and fixed security problem where one could log in as any listadmin by passing a "create-list" token as a authtoken header