pluggable auth
fixed bug with pipelines in bokeh.server.models.user