set custom error response content for 401/403 errors
let people through as the default authorization policy

Decline authorization authority when there are no relevant Require lines.
clean up unneccessary Require line handlers

These generic directives can be handled by other Apache modules. Less code!
require POST method for login (see #10)
use error UX instead of alert()
implement logout via XHR (POST "null" assertion, fixes #15)
update to latest reqwest (with explicit version!)
rename to mod_authnz_persona everywhere (fixes #18)
show normal 403 error for persona-idp mismatches

Seems like enough information for users, and slightly better for security. It
also seems like this is hard to do in Apache 2.4's new AAA framework.
make things work with apache-2.4
language/typo fixes in comments/README
try to improve comments a bit
reflow README to 80 columns, fix interpunction/capitalization
remove obsolete XXX comment
consistent markdown usage
mention dependencies in installation sections
extend installation/dependency notes in README (fixes #22)

Thanks to @gene for the RPM instructions.
note mod_authz_user dependency for example usage
remove config sample, the README should cover it all
make it work on apache-2.2 again