scaffold for users
ssl + /bookswap changes for move to doraemon
moved users within /bookswap prefix
cleaned up non-standard routes

so non-standard routes don't get lumped into Bookswap/controller#method. or something.
added 403 and httpcats
Authorization with usernames from cosign