Merge pull request #56 from mikey179/master

must specify token store
Merge pull request #57 from mikey179/master

don't pass the request to the authorization provider, not neccessary
Merge pull request #58 from mikey179/master

more work for 5.0.0
Merge pull request #59 from mikey179/master

more work for 5.0.0
Merge pull request #60 from mikey179/master

more work for 5.0.0
Merge pull request #61 from mikey179/master

fix bindings
Merge pull request #62 from mikey179/master

delegate authentication to login provider if authorization header set bu...
Merge pull request #65 from mikey179/master

more work for 5.0.0
Merge pull request #66 from mikey179/master

fix bug: request with token that doesn't find a user must trigger login
ensure compatibility with stubbles/webapp-session 5.0
ensure compatibility with stubbles/webapp-session 5.0
upgrade to next major versions
optimize: reflect callback only once regardless how many annotations must be read
move routing related stuff into separate namespace
fix doc comment
introduce auth constraint
allow to prevent redirect to login when user not authenticated