simple web session based auth built on top of the go library gorilla toolkit