use Rserve's new ocap name support
allow redirect pass-through and fix login quoting issues
make RC.authenticate a bit more robust