bottle.py user login/logout/authentication