Composable API handler, support v1 and v2 login.

Some refactoring & restructuring of srvRoot to support the existing Admin.Login API as well as allowing us to introduce a v2 Login API, to be proposed in a followup pull request.
at the top

var fail params.LoginResult

then everywhere

return fail, err