ADDED: pengines:authentication_hook/3 and pengine_user/1 to deal with
HTTP login management.
Added pengine_user/1 to safe predicates.  Seems fair to allow a pengine
to know the current user.