More updates
Fix access controls on buckets using authorize rules
Remove some debugging
Remove some extra debugging
Split loading of the secret from the decoding process in security.py
so we can reuse the decoding process for other things
Start pulling admin functionality together into an /admin url
Add the pwhash to the bootstrap example
Add some test utilities
Update docs