authlab: A lab to play with authentication and authorisation problems