further web UI styling
added custom authentication

Added custom Authenticator to check credentials and handle
On-Behalf-Of requests.
add On-Behalf-Of header in client

Scrape local client user's username from os.environ['USER']
create only one collection by default - `default`!