reworked client login system, added directive for display of elements that
require certain user rights, added bookmarking for partients, added token
now autoupdates with every request