final Mac hmac = app.security().getMac("HmacSHA256");
app.use(new BodyParser());
app.use(new CookieParser(hmac));
app.use(new Session(hmac));
final FormAuth formAuth = new FormAuth(new AuthHandler() {
@Override
public void handle(String username, String password, Handler<JsonObject> result) {
if ("foo".equals(username) && "bar".equals(password)) {