Twisted: user auth service [WIP]: deferred auth, web login/logout