start 0.0.6
Merge branch 'gozer'
release 0.0.6
start 0.0.7
Add AuthPersonaAuthoritative, no handling of it yet.
TODO--
Add AuthPersonaAuthoritative On/Off directive
indent
no SSL cookies in testing
forgot merging of assertion_header
comment++
Important to bail out of the XHR POST request *before* sending any
data. The client-side code expects to just get nothing or some JSON
saying what's wrong. It gets confused by arbitrairy HTML content.

So, just make sure to abort that request early. It will come again
as a regular request anyways.