[New feature] Security assessment of CrownLabs

[frisso]

CrownLabs includes a set of different services, each one with its strengths and weakenesses. Furthermore, it leverages an innovative interaction with the API server, in which each client (running in the browser) directly interacts with the API server itself, without an intermediate backend.
This feature request suggests the opportunity of a proper security assessment to make sure that the current install is secured enough to be offered on the public Internet.