Summary:
 - WEB_ELECTION gets a new submodule of type ELECTION_SERVICES
 - per-election services do no longer take UUID as a param, but are
   registered at a path containing it
 - no more ESIndex, election home service is back
 - inline some submodules of SITE_SERVICES, drop ALL_SERVICES
 - rename old SITE_SERVICES into CORE_SERVICES
 - move election-specific templates to a new ELECTION_TEMPLATES; the
   templates in the new signature do not longer take an "election"
   argument but TEMPLATES.Election is a functor that takes a
   WEB_ELECTION and returns an ELECTION_TEMPLATES
 - adapt the booth to the new path layout

Additional changes:
 - merge VOTING_SERVICES into ELECTION_SERVICES
 - inline {SITE,AUTH}_TEMPLATES into TEMPLATES
 - all templates take a final () argument to emphasize their impurity

Each election may have an owner who can perform administrative tasks.

The source code is public now...

 - Eliom_config.(use get_config instead of parse_config)
 - presence of <source> is no longer technically enforced
 - simplify configuration of auth systems
 - auth systems directly register themselves

The new field is used as root for services specific to an auth system.

Do no longer rely on the presence of result.json to decide whether an
election should be imported or not. Now, directories listed in <data>
tags must contain an "index.json" file that lists sub-directories that
should be imported by the web server.

Additional changes:
 - allow several <data> tags
 - small memory optimization in election.json parsing

Now, everything needed by the web server to handle an election is
bundled into a module of type WEB_ELECTION which is passed around
everywhere.

 - metadata is specific to web, move it there
 - create Web_serializable, and also move randomness there
 - metadata is not optional (but its components can be)
 - rename user_type into user_domain
 - serializable version of ACLs

 - store the service itself
 - move closer to site services

The signature is split into:
 - SITE_SERVICES: site-wide services, with single instances
 - ELECTION_SERVICES: per-unarchived-election services
 - VOTING_SERVICES: per-open-election services

For the moment, per-election services are still site-wide with single
instances.

Other changes:
 - the "global continuation" getter is renamed to "cont", so that its
   container module can be directly cast into CONT_SERVICE
 - move remaining service declarations out of Services
 - move service registration code close to service declarations,
   following the same Services/Register pattern as in Auth_common
 - various simplifications in Registration

There were 3 phases: configuration parsing, service definition and
service registration. The last two can be merged, since there is no
direct external reference to the service of a specific auth system. As
a consequence, there is no need for a Register sub-fonctor in
AUTH_INSTANCE: service definition and registration occur directly in
the Make function, called by instantiate.

Summary:
 - move rewrite_prefix to Web_common
 - each auth system now has an $init function that registers its
   configuration spec and an $exec function to Auth_common
 - an auth system may support multiple instances via configuration;
   user_type is specific to each instance
 - when parsing is done, each $exec is called with an $instantiate
   callback; $exec is supposed to call $instantiate for each instance

TODO:
 - default fallback when there are several instances
 - generic login should do security_log
 - auth system instances should not set user_type themselves
 - it should not be possible to login twice
 - admin login
 - update doc

We want to be able to share private variables between service
definition time and registration time, so we put both as submodules of
the Make functor.