Make the HTTPD runnable w/o a valid config (issue #767)
The /auth/ endpoint mostly works (issue #767)
Make Brennan's pretty login screen live and functional (issue #767)
Auth: bugfixes, add non-private config file (issue #767)
Auth: Enabled!  Added /auth/logout/ and /auth/login/ (issue #767)
Fix nosetests + minor tweaks.
Added AJAX js for auth screen
Auth: debug/introspection, shorter cookie TTL, bad pass feedback (issue #767)
Lock spam begone, for now
Setting overlay on favicon with inbox unread count.