Improved session security.
Reenabled annotations_add() and annotations_remove().
Minor edit.
Added entry owner to the returned JSON.
Minor edit.
Merge remote-tracking branch 'origin/back-end-working' into back-end-working
Minor edits.