Module handlers 

/api/session — dashboard sign-in, whoami and sign-out (#2).

Functions

delete_session

DELETE /api/session — clear the cookie.

get_session

GET /api/session — the current credential, or {"auth":"disabled"}.

post_session

POST /api/session — exchange a token for a session cookie.