first stubs for session managment and two factor authentication
updated git ignore
authentication works, session timeout in config
clean up