Fix CouchDB query keys for PI answer stats

See merge request !86

Only enable full CORS config if a domain is specified

See merge request !85

The public CORS config was always overriden by the more generic config.
Credentials are no longer allowed to be sent with default CORS config.

Set role for admin users

See merge request !84

Setting 'security.cors.origins' did not have any effect since the the
configuration was overriden by the default path settings.

Made links relative for GitHub compatibility.

Made links relative for GitHub compatibility.

This fixes a regression caused by a change in CouchDB4J 0.8 introduced
in commit 1eaebde0. CouchDB4J 0.8+
always defaults to `reduce=false` as long as grouping is not enabled.

This fixes a critical bug introduced in commit
1eaebde0 which lead to premature
deletion of guest sessions caused by incorrect type handling.

Always set `creationTime` on session creation. Sessions with invalid
timestamps might otherwise be deleted by the scheduled cleanup.