Feature/web api internal traps

For your consideration. 
This adds support for deauthentication through the WebAPI.

Not yet called by default. We still have to modify enforcement.pm for that. 
Ok. Consistency wins. Will update accordingly.