add a few more validation specs.
remove load dependencies filter in favour of a constructor.
use factory girl.
rename filter to action.
let the container build the resource.
introduce secure auth cookie.
return the secure cookie hash from the login command.
return nil if the credentials are incorrect.
add specs for building a new session.
update authentication to use session cookie.
raise error if session key is not legit.
convert all specs to use cookie based authentication instead of session.