RPC: Resolve authentication /capabilities fiasco
Currently our "session" object is protean and changes its type depending if you've authenticated. Instead, authentication should give you a capability. See discussion at !1092 (comment 2894534) .
Also see discussion around !1092 (comment 2895394) for user/superuser discussion.
Edited by Nick Mathewson