refactor: merge auth files
config comments
add timeout handler type
web: add timeout handler
API handler: add timeout
fix deadlock, use underlying WriteHeader method
web response writer sync
add timeout handler for #103
suffers from race. will have to iron out also with
http.TimeoutHandler, ResponseWriter.Header() from std lib