Proper card-adding interface

For a shared workstation situation, it's best to keep the card ID out of the URL, while a kiosk doesn't matter so much. I've added a page (addcard_form.php) that allows both methods, and dedicated login page for adding cards.

This will replace members/addcard.php (fixing #34) and is a prerequisite of londonhackspace/Doorbot#4.