replace unknown icon url
implemented ldap authentification (login)
added logout functionality
start to protect API from not authorised user