login with openID connect

to get the token, use the 'user' service in angularJS:
user.token

currently the token must be explicitly sent with each request requiring
it.

deploy-version was tested on martin's server