Add subquery to the objects all in model permission
Password encrypted by SHA-256
Remove token from e-mail
Links with localhost string removed
Merge service-layer + admin-panel