Invalidation, HMAC for Authenticated Encryption
Invalidation, HMAC for Authenticated Encryption

* Use HMAC for Authenticated Encryption of Server Opaque
* Implement invalidation for various reasons
* Refactor to use Exceptions rather than return codes where appropriate

asauber/session-armor-django