Basic User Login on Webapp

- use gorilla SecureCookie
- enhance requireAuth to check an "auth" cookie
- auth cookie validation is now pluggable
	signature is: validationFunction(*http.Cookie) err

  Returning an error means validation failed.
  Returning nil means validation succeeded.
- add helpers for secure cookie keys to webapp/config