Use a configurable responder when not signed in

The aim here is to to give Monban users full control over what happens when
`requires_login` is run and a `user` is not signed in.

* Default redirect location configurable with `requires_login_redirect`.
 This accepts anything that can be passed to `redirect_to`.
* A configuration for `requires_login_responder` was added. In the
 default configuration, this is a lambda that conforms to the interface
 of ActionController::Responder.

Using the responder interface seemed a good way to offer flexibility for doing
more advanced things (responding appropriately based on MIME types, for
instance).
'Unauthenticated redirect' has a meaning in web app security already and also wades into the territory of whether this is authorization or authentication, which is nicely skirted by naming the filter `require_login`.

`redirect_location_when_not_signed_in` is kind of a mouthful. And would the `responder` option be renamed similarly?