Redirect the user to the (unauthenticated) destination, so that it
might try again the request. This introduces potential for a redirect
loop unfortunately, so let's see how well it works.

Matches a specific production config that needed to be tested.

Again another package required for hermetic testing.

Will run tests in the package build phase.

Prevents spurious dependencies in the other libraries.

Nonce

See merge request !3

Validation error details are also moved behind the 'debug' option,
in order to reduce noise.

The native Python module implements a narrower interface and is much
simpler than the SWIG-wrapped version (the Python sso module API stays
the same).

The native Python module supports Python 3.

First steps towards Python 3 compatibility.

Handles the case where the SSOLoginServer URL has a path component.

This makes the C implementation compatible with the Go one, which
generates unpadded base64-encoded tokens.

Since swig generates a .py file, the build_ext step needs to run
before the build one.

This reverts commit 76caf208.

This reverts commit 01eb7558.

This allows for the package to be properly installed by pip
(and a standalone python setup.py install), otherwise the distutils
build stage won't see the swig-generated file.

There are probably better solutions to this issue.

Pull reference code out of apache's own util_cookies.c (which is
unfortunately not part of libapr so we can't link to it in our tests).

Also use libapr for url-escaping, getting rid of some ugly code.