Web App login and basic state handling

Various other JS libraries added
Small changes to app-only endpoints (strip slash, etc.)