move common toJSONObject method to SystemNotificationRepository
go back to using username-only authentication with the dev jetty server
broadcast active-at-creation notifications #344