Force authentication to access removal_requests
Added AuthRoute, AuthController, and AuthView to the assets file
Mended auth template
Started fleshing out AuthController, removed entry in assets for not-yet-needed AuthView
Moved AuthHandler from admin.py to ajax.py, reworked for api-like usage
Made the logout button fire a logout event
Added /api/v1/me route in tornado config
Re-enabled is_admin check