rest: raise krb error with error message
rest: fix login form template
rest: rename remote_auth to sso
rest: document sso