Flexible configuration and user authentication

- added flexible configuration by 'dictionaries' with sample implementation for file lookups and sql database lookups
- added user authentication based on extended configuration attributes "auth users" and "secrets"
Hint: SessionStatus.AUTHREQ reads username + password. There should be another SessionStatus to request the username without the password for non-auth'ed transmissions
Security issue: this is really a configuration error. Either throw an exception or return false immediately. See also the semantics for secrets file in rsyncd.conf