move log initialization up so we can use it
store session on getSession; add getSessionRoles
Merge branch 'feature-authentication' into int-mushin-3