Merge pull request #13 from xtuple/master

Catch up.
issue #19051: changed psql path default
issue #19051: better authentication
issue #19051: check canUpdate on organizations
issue #19051: update TODO
issue #19051: using model get construct
issue #19051: added XXX todo
Issue #19146 X.Session init should not commit to db. Call it in auth AFTER authing.
issue #19051: added unexposed server
issue #19051: got code to work with exposed or unexposed server
issue #19051: added caveat
Issue #19146 Add a check on load to ensure the supplied cookie matches what's in the db.
Merge pull request #88 from shackbarth/19051

issue #19051: added more legitimate authentication
issue #19151: safeguarded routes
Merge branch 'benfix' into 19151
Merge pull request #89 from bendiy/19146

19146 Fix session security bug.
Merge branch 'xtuple' into 19151
issue #19151: cleanup
Merge pull request #90 from davecramer/master

add update script
Issue #19146 Add session and org selection to selection route. Tweak original fix.