add logout functionality
added busted unit test framework
added 'marketing site, removed borderpatrol.lua
pull session management into a 'class'
refactoring to do things a little more nginx-like.
make /auth internal only, and match it explicity
nginx config cleanup