Flexible configuration and user authentication

- added flexible configuration by 'dictionaries' with sample implementation for file lookups and sql database lookups
- added user authentication based on extended configuration attributes "auth users" and "secrets"
Hint: SessionStatus.AUTHREQ reads username + password. There should be another SessionStatus to request the username without the password for non-auth'ed transmissions
please don't allow username to be null, let the caller handle this instead