Changes to /sessions

Created by: NotSpecial

There was some discussion between me an Fubu on the commit 1d3a88c0 wheter ETH-but-bot-member people should be able to log in.

I was against this and the commit was kept. Since then Conrad has raised a few points that made me reconsider this decision.

Some lectures are from ITET/MAVT, but are attended by students in MAT, INFK, etc. But all documents for those lectures are in our database. Similar for the other way around: Lectures from e.g. INFK which are attended by our members.

For those reasons we have always shared those documents with all other students at ETH. So it probably should be possible for them to log in to access the documents. (Since we are sometimes not allowed to publish ETH documents to the public we need some authentication)

In combination with Fubus points (see commit discussion above) it seems necessary to allow non-members to log in again.

But on the same hand we have to reconsider our authentication levels to be aware of public/non-member/member differences, not only public/registered.

(But this should go into another issue)

On the other hand it would be nice to use eve methods for a post to /sessions instead of our own route.

I think it should be possible to handle it similar to this turoial

Will try this later.