#1 New authC/authZ module

[Andrew van der Stock]

The current authentication model is quite old and more than a bit broken.

The new authC module shall be:

Modular
Pluggable: should allow authC chaining to common CMSs and LDAP
Secure: The code should be as simple as possible to ensure
More features: support idle time out, ISO / COBIT controls

The new authZ module shall be:

Modular
Cope with new roles on top of traditional XMB roles
Move from being ranked based to role based
Fast and simple