master
extends api, add invite system
fix cascade deleting
openapi schema amendments
add user's photo_url
finalize api
make external api
add cors, rename webapp
more safety locks