Temporary location of Bob.  Increased time to run test.
Report exception terminated test cases explicitly.
Made it possible to look up user permissions from their OpenID.
Implemented authorisation checks in some HTTP handlers.  #44  Dropped special handling of cached HTTP responses.