Security improvements, issuing http redirects to /login in some scenarios for better user experience, misc. refactorings
trivial launch script for non-eclipse users