Replaced one-pager with multiple pages and fixed security bugs

web/index.html

@@ -7,10 +7,19 @@
 <link rel="stylesheet" href="/style.css">
 </head>
 <body>
-<div id="app"></div>
+<div class="loading-wrap"><div class="muted">…</div></div>
 <script src="/config.js"></script>
 <script src="/i18n.js"></script>
 <script src="/api.js"></script>
-<script src="/app.js"></script>
+<script src="/common.js"></script>
+<script>
+(async () => {
+  let user = null;
+  try { user = await API.me(); } catch (e) {}
+  if (!user) navigate("login");
+  else if (user.must_change_password) navigate("forcePassword");
+  else navigate("competitions");
+})();
+</script>
 </body>
 </html>