add srp module for secure authentication and part of openssl dlls for ctypes speed
commit a little srp work
need master changes so we can use the same databases
some more SRP work, also add prefs node info to data entry title like registration work
remove some unecessary redirection crap from pylons that was messing with cookies in 401 conditions, overall not used anyhow
save the code I was working on cause I'm throwing it away.  SRP would require javascript crypto and there doesn't appear to be any real secure base from which to work in the browser so its best to rely on digest authentication, well known, secure _enough_ and now figured out how to get Authorized headers past the mod_fcgid blockade on dreamhost
back to desktop
trying the switch to cherry py, http1.1, keep alive, etc
switch java apps over to apche http client, untested
first attempt at a digest authenticator
and get swing version to hook up
finally get Apache HTTP client authentication to work the way it should, single requests when we know the password and nonce from the server.  fix up server side to properly calculate digest when using auth-int
move catch out to caller so they can deal as appropriate and get ready for multiple possible realms
change auth a little bit to actually consider usernames (admin or event) to determine how they are trying to login
bring swing apps inline with backend changes
cleanup admin controller a bit
move passwords into their own table and no longer viewable via normal event/settings pages
and add password update form
test for stripping passwords
database upload as raw data so WebOb doesn't destroy it before auth-int, other small fixes