+1. if orders.xml exists do not overwrite
+4. link to company - contact created - token filled. ok -> field [ChangePasswordTokenSentOn] fill with date
+5. same thing but then when contacts are imported
+9. all admin / backoffice page which are accessed directly when not logged in should be redirected to default homenotloggedin page
   check:
   http://starbusiness.spaarsysteem.com/Admin/RequestAccounts
+10. all backoffice pages should be noindex, nofollow as metadata, so that they do not appear in search engines