Servatrice password authentication

Implements #290, and adds a lot of nice comments to servatrice's example configuration file.
Depends on #353 
I'm not sure, but this might be vulnerable to a timing attack. http://stackoverflow.com/questions/26219362/is-qstrings-comparison-vulnerable-to-timing-attacks