refactored the check_password function into the api/users module
Added a pre-request tool that will eventually check credentials stored in session variables. If authorization succeeds, the cherrypy.request.authorized flag will be set to True. Re-jigged the way that template rendering is done in the web app to simplify, and to support checking for this new flag. The requested part of the app can now be replaced dynamically depending on the results of authentication.
Added a snazzy new login form. Unfortunately, it's all you see because the account registration and login functionality is still missing in action.