Add authTime to Subject class

The authentication time is required to support the 'max_age' parameter
and to provide support for the id_token 'auth_time' claim.

- Remove Text implementation of Subject
- Create a Usr data type to represent the authenticated user in Scotty
- Use Read/Show serialization to store it in the session cookie