Alphabetize config file entries
Canceling a heat is possible as of #37
Add a configurable admin password

Set the environment variable DERBY_ADMIN_KEY to set the password.
If this is blank, there is no password.
Refactor routes into a derby "resource"

- The reset_derby_path method name does not change.
- The login resource was not in use.
Implement password login

Beware of session hijacking via cookie snooping when not using SSL/TLS.
Lock down the app to allow only admin to make modifications and run the race
Document password authentication in the Readme

Closes #6