New authentication system

• much better than the old one
• old version was very ad-hoc
• this one provides a real framework
• multiple stores/credentials/realms allowed