Restrict MSCO server access

[Joern Ungermann]

As any connected MSS can “create users” and “projects” it is desirable to limit access to the server by, e.g., a password similar to the MSWM server to prevent, e.g., denial of service attacks.

[Reimar Bauer]

http_auth leads into an invalid Url currently

[Reimar Bauer]

may be also an API Key solution can be an option, so that we have to setup on the users json file that API key

[Reimar Bauer]

improves login protection by a server given auth method, fixes #489

→ <<cset e8e2a4d80c63>>