implement auth via strategies

Use Strategies to mange the authentification, Web and Api Strategie can be configured different.
Tow Strategies are inoculated, BasicAuth (like the old behavior) and None (for no Auth).

With this way, it is posible to write own Auth Strategies, for example to use a DB as Backend oder make a IP restriction #31)

I think this is a universal Solution to solve #27 and #31.