Feature/web api internal traps

For your consideration. 
This adds support for deauthentication through the WebAPI.

Not yet called by default. We still have to modify enforcement.pm for that. 
Technically deAssociate is the correct form.
desAssociate is a gallicism.