added bespoke authenication provider (though it does not compare passwords, merely checks a users profile handle is correct). Added Golfer instance to the security context for quicker access to 'logged in user'