* Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token
Testable code. Yay.
First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.
