Also tweak travis config

The server will always overwrite this field with the username obtained from
the auth provider. Allowing the client to set it is a waste of time.

First attempt at dropping privileges

Add contributing section

Load private key in memory as well

Move templates and static under server/