auth

minimal user authentication infrastructure with pluggable back-ends
(including a dummy pass-through back-end and a simple HMAC based
back-end)