* Change login behaviour
- To login you now no longer need to send 'email' and 'password' params (these come off the 'Authorisation' header)
- The login resource now returns the current user (this is so we can cache in client side in the future)