Add middleware that generates `request.authorization`.

`request.authorization` is a request-specific Authorization
header that can be used for downstream requests made on the
user's behalf.
0.2.1
Move /login to /signup.

/signup is used by other Faithlife applications.
0.3.0