write skeleton of signin process

The app now authenticates against a hardcoded email and password.