initial version of security
custom login
Merge branch 'master' into auth
logout
jdbc auth provider
#3 complete. logout button.
Merge branch 'auth'
csrf protection