added google auth process using openid.
added user model.
added session system to store current user.
added login and logout process.
finds current user from authorisation header.
added access control for server side.
added access control for the client side.
view update for access control.
removed unused code, comments and added comments.
shows alert message when login failed.