Authentication [from scratch] with Sinatra