add util/sha-256
implement/enforce API request signing (POST only), update io/request fn to accept optional :sign-key param, update API validators, cleanup server config, update API handlers (sig validation & update /objects query to optionally exlude ASTs), add sha256.js, update html files
Merge branch 'master' of github.com:postspectacular/devart-codefactory