Not tested yet on a real Raspiblitz! refs #18
refs #11
* password_a must now be posted in the request body as a json object * password is now read from the .env file instead of hardcoded * password will be checked if it is min 8 chars * one_time_password is not yet in use and optional