Passport username/password authentication

I think the basic username/password authentication logic is ready. We are hashing passwords on the client with SHA256, and the basic ability to register, login, and logout is in place. The login and register pages now bring in jQuery to intercept the form submission and inject the hashed password into a hidden field. 

When the user is authenticated, the user is available on the request object. 

Validation is very light / non-existent at the moment, so we're not completely done with authentication, but the basic pieces are in place.