feature/jwtcleanup (#113)

* remove extra dmin check, add blocking check via jwt and auth middleware
* short jwt and refresh for expired
* lint: missing comment on UserFlager
* simplify user management in auth refresh
* allow custom max cookie age
* test blocked user
* reset cookie for blocked user
* move admin perm detection to data service
* customizable ttl with opts as a part of auth group
* add local auth provider dev
* main minimal test for dev auth mode
* add comments and update docs with current params
* add admin and auth_dev flags
* comments for dev compose
* lint: shadow err

compose-dev.yml

@@ -0,0 +1,38 @@
+# compose file for local development
+# starts backend with basic auth "dev:password" and Dev oauth2 provider on port 8080
+# UI on https://127.0.0.1:8080/web
+
+version: '2'
+
+services:
+    remark:
+        build: .
+        image: umputun/remark42:dev
+        container_name: "remark42-dev"
+        hostname: "remark42-dev"
+
+        logging:
+          driver: json-file
+          options:
+              max-size: "10m"
+              max-file: "5"
+
+        ports:
+         - "8080:8080" # promary rest server
+         - "8084:8084" # local oauth2 server
+
+        environment:
+            - USER
+            - REMARK_URL=http://127.0.0.1:8080
+            - SECRET=12345
+            - STORE_BOLT_PATH=/srv/var/db
+            - BACKUP_PATH=/srv/var/backup
+            - DEBUG=true
+            - DEV_PASSWD=password
+            - AUTH_DEV=true   # activate local oauth "dev"
+            - ADMIN=dev_user  # set admin flag for local ouath2 
+        volumes:
+            - ./var:/srv/var
+            #- ./web:/srv/web # uncomment to map web directory directly. It will propagate local changes to container without redeploy
+
+        command: /srv/start.sh