adding authentication_provider interface
cleaned up security model and fixed a few bugs
Merge pull request #2 from jchenry/authentication

Authentication