Use bootstrap.
Remove old RemoteUser filter.
Hoist out a common case.
Parameterize the realm.
Move public resource paths into configuration file.
Move config to separate file.
Move public resource paths into configuration file.
Move Basic auth user agent check to separate config file.
Ensure the employee is active.
Support login cookies.
Support logout with login cookies.