Make Authenticator a client interface of LoginHandler

Adhere to the Dependency Inversion Principle
Adhere to the DIP for repositories

 - Make the repositories package an interface
   only package, owned by the clients of
   repositories
 - Move the sql implementation of the
   UserRepository to the new
   bones/db/sqlrepositories package