api sessions controller
password upgrade shim
auth is possible over json api: coca on way out
auth cookies
plain auth token
cookie_auth hooked up
warden session detached
explicit session revocation
remote deauth seems actually to work
and out again
api tweaks in support of auth
Merge branch 'feature/auth_via_api'