extract yesod auth to own repository: https://github.com/JanAhrens/yesod-auth-xing