Web server authentication

It's not ready to merge, as it's still missing the `startup.sh` parsing for the `-t SERVER_TOKEN` option.

When it's done, it will close #13.