backend.go

This will allow us to identify which specific authenticator (ASP,
hardware token) was used for successful auth requests, and eventually
feed that information to the userlog.