fix doctype and charset
templates are part of the REST
setup crypto and uuid extension
authentication and authorization

 * HTTP basic auth
 * HTML form based authentication
   - GET  /login
   - POST /authenticate
   - POST /logout