use shared cookie auth to query multi-user server about authentication
use cookie paths to isolate credentials

requires multi-user to move to non-shared prefix,
so no cookies are set on ‘/‘.

Each server has its own cookie name, as well.
make multiuser_notebook a package