Tornado authentification example