add authentication with a session cookie
code cleanup, add more documentation, change LICENSE
merge