Create user login and admin routes.

TODO: authenticate on the server using session keys. Client side
session management is already covered.