added most of play2x-auth sample code
hacking around to get authorized

freaking secure option on cookie... default was actually true
need to unstub db calls
get rid of player related stuff
implement authenticate / getById