Walter: authorization work

now there are no active calls to django. Potentially django can be totally removed; it would be too difficult to maintain authorization between the two frameworks and database work could be unecessarily complex. There is now an ability to login and get a cookie, as well as logout and clear that cookie.