delete
forgot to export
add support for persona authentication

Mozilla's Persona (previously called BrowserID) is pretty nice. I've
added support for it.

The middleware intercepts request that have the X-Hails-Persona-Login
and X-Hails-Persona-Logout headers.  If login, the middleware verifies
the assertion with Mozilla's server and if successful sets cookie
_hails_user to the email address _hails_user_hmac to its HMAC-SHA1.
If logout, the middleware just deletes the cookies.  If no header is
matched the cookies are checked and X-Hails-User is sef.

If the app sets the X-Halis-Login we usually redirect to the login
page of the authentication service. In this case, we redirect to
/login where the app is assumed to use Persona's js lib to start the
authentication procedure
exceptions thrown by middleware -> 500
openid in debug mode when OpenID-provider is set
export constructor
Merge pull request #80 from scslab/delete

delete
Merge pull request #81 from scslab/persona

Persona
vulnerability-fix: filter out x-hails-user

We forgot to port this from the old  version of Hails.
As a result a user can just set x-hails-user and bypass any
authenticatoin.

Thanks to Jeff Seibert for finding this.
Merge pull request #82 from scslab/x-hails-user-vuln

vulnerability-fix: filter out x-hails-user
Backport external auth - hacky as shit
Nit
Nit
Nit
Port to bleeding edge LIO (Priv type changed)
Don't rely on LIO operations being lifted with liftLIO
Remove version deps
Remove version deps
Bump version
Port to the new (new)LIO