Added public-facing basics.
Added password store.
Setup creates empty JSON database. Subsequent authentications return that database.