TODO
explicitely tell the user he is disconnected
protect login from contening ":" > maybe not necessary External audit of the global security https
switch to modal instead of popups => not now big files? chrome crash around 2 mo => good enough
branching:
switch to a private public key system and develop note sharing(read-only) or sharing using private/public key (readonly once shared)