Shared security primitives and account type definitions

Token issuing and parsing

Annotation driven operation logging

Token filter, URL-to-role authorization and open API manifest

Login, registration, password change and recovery with pre/post hooks