Rough support for multiple auth back-ends

- Rough in hmac authentication result for trusted connection with
Roundcube
- Rough in application specific password support via mysql