- Review domain relations between user and directories (root, repositories, favorites and shared).
- Add jaxrs Gson MessageBody Reader/Writer, enable cors filter in dev mode, domain object parameter converter and WebApplicationExceptionMapper.
- Only use status 401 (unauthorized) when user is not logged in otherwise use 404 (forbidden)
- Add top level endpoints