app.use(new BodyParser());
app.use(new CookieParser(hmac));
app.use(new Session(hmac));
final FormAuth formAuth = new FormAuth(new AuthHandler() {
@Override
public void handle(String username, String password, Handler<JsonObject> result) {
if ("foo".equals(username) && "bar".equals(password)) {
result.handle(new JsonObject().putString("username", "foo"));
} else {