Add authentication & role-based security

[bobharner]

Use Tynamo Security (based on Shiro). Consider whether we can use Tynamo-federatedaccounts so that users (which would be mostly Tapestry committers) can use their existing Google or other Oauth-based accounts for authentication rather than having to create a new user name & password.