Add authentication to all routes.
Extract session object to encapsulate authentication.
Clean up session model.
Merge pull request #9 from bradgignac/login

Login