moved the getting of preferred language from a request to common. moved the svg templates to web. moved openid to its own package. moved request data to web. moved translation to its own package. moved the websocket handler to web/controller.go. added session support. added panicing if we try to run on port 80 without a real secret.