Initial implementation of login and logout handlers, leveraging simple site-level authenticated/anonymous ACL policy.