Authentication

Authentication/authorization backends belong in haas/auth_mechanisms .  It's
possible that the API of that plugin will have to be expanded to cover what
the CLI needs to do.


WIP
Yeah, I think this should be changed all in one patch since we have done it consistently elsewhere.