no longer hash the user's password
Merge remote-tracking branch 'origin/play' into authtokens
implement session usage for web interface login

the web interface will now use session ids exclusively
sessions reads are cached in the server now (to prevent multiple loading of sessions in one request)
Merge branch 'play' into authtokens
Merge branch 'play' into authtokens
Merge branch 'play' into authtokens
Merge branch 'play' of github.com:Graylog2/graylog2-web-interface into play