Services and some locking

Authenticator and Overmind can now be run as services (untested)
SessionManager locking
Start of the MessageProcessor tests