Authorized shutdown

[klahnakoski]

It seems any browser window calling /shutdown will shutdown the callback listener server. This is annoying because a failed login process will mess with the next login process; shutting down the listener before the next login process completes.

Please add some authentication to /shutdown endpoint so that previous login sequences do not mess with the current one.