app_userman: authorization for static; fix `login` u.roles

Auth*n datasets: `Can`, `Roles`, `Users`.
They are inline for development, then can be as in files as in database.

initAuthStatic(): init permissions for static
mwBasicAuthorization(): serve only allowed static files

`Can.Static` is special subset for static content files authorization. Any item there is used in the permission dataset: `Can.backend`. Thus it must be protected in the first place.

API calls can protect themselves or 401 can be thrown right here.

Fix (thinko) return of user roles in `login`:
-                ret.roles = u
+                ret.roles = u.roles
first ExtJS component authorization: only direct creation
errorHandler: bug missing "+"; print all && stack if exists
pingback: check `req.session`; throw stack only
userman: move `can`, `users`, `roles` datasets to files
app modules loading: show `err.stack`
app_back: apply lib/process.js actually, move global here
node-webkit: 0.9.2
first ExtJS component authorization(BackendTools): testing and debugging are done