cleanup for token based authentication
first stab at oidc middleware for external authentication
embed idsvr and get oidc authentication working for home page
moved the authorizaton attrs
rework authN to all be owin based; config webapi for correct authN middleware
add bootstrap token to cookie
add token to page from cookie
send token in ajax calls from client
update nugets
enable token support for api endpoints
rasu
rework to not load username from API
remove form url encoding formatter