Feature/web api internal traps

For your consideration. 
This adds support for deauthentication through the WebAPI.

Not yet called by default. We still have to modify enforcement.pm for that.