Password-based authentication, via OpenID, for MS API.
Factor out OpenID code in libsyndicate.
Derive verifying key from gateway key in RG, if no user key is given.
Do away with most of the key database.
Merge branch 'password_auth'