change appstart to use static ctor for singletone
remove old readme
change ui to allow logins
prefix cookie with anon or authenticated flag

don't attempt to consume cookies that were issued for an authenticated
user if user is no longer authenticated; remove cookies when crypto
exception happens;