Feature/web api internal traps

For your consideration. 
This adds support for deauthentication through the WebAPI.

Not yet called by default. We still have to modify enforcement.pm for that. 
Should we stick to desAssociate for consistency though?