bugfix: add forgotten auth.py
settings: set TEMPLATE_PATH for bottle, rename views to templates