Using JSON-encoded requests/responses instead of REST.
The front-end now supports all three habit modes.
Added stub functionality for authorization/authentication.
Only hashes of passwords are now stored, and we now use an encrypted token for authentication.