Flexible configuration and user authentication

- added flexible configuration by 'dictionaries' with sample implementation for file lookups and sql database lookups
- added user authentication based on extended configuration attributes "auth users" and "secrets"
Hint: SessionStatus.AUTHREQ reads username + password. There should be another SessionStatus to request the username without the password for non-auth'ed transmissions
this matches for example ::, but there is no meaning in allowing an empty type or file. Restrict to one or more word chars instead: Pattern.compile("^(\w+)::(\w+)$");