Auth: Initial implementation

Includes GitHub OAuth

Fixes #29
Build: Upgrade to connect-mysql 0.4.0

This allows automatic session cleanup without SUPER privileges.
Auth: Add logout route

Expose activeUser in response.locals based on request.session.user.
Use a layout template for common header/footer.