Working register/login/logout and restriction of all but a few /api URLs to logged in users. Using passport and passport-local-mongoose.
Renaming core routes to /api/flok/...
Correcting list of public urls
Most basic frontend register/login/logout flow.