Login/Logout and session support with roles + convert to html 4.01.

Roles give a fine-grained access control. Roles can be shared by
different groups, so there is no need to check for more than one
role in most cases.