First Batch of Opening Source.

Security-related code in AppController, Models/User, and the
IrisIOHelper.
Mostly untouched save for internal routines, bolt-caching and misc. in
AppController, and secret keys and salts used for password hashing and
CSRF token generation.