External auth3

This hooks up scott seago's work. Any bugs are probably bugs that I introduced while bringing his work up to date.

1. allow our application to use http headers coming from apache
2. merge copy/pasted code into methods.
2. configure screen to setup http header auth.

/cc @abellotti