Audit: pentest the application (sec) and QA

[nicolasauler]

Before launching of working version 0.2, assess security aspects of it, with auth + 2FA, etc.

Pentest

Test spamming with captcha

Also test sec headers Test with static and dynamic code analysis Mirai and miri