Significant set of changes, implementing basic authentication using cookie-based sessions and LDAP. Note that this allows routes to be handled independently, allowing some to be public and others not. Logging is included, and will remain so until we have completed authorization. Resolves #1