Authentication revamp

Standard users receive an access token on login instead of passing
credentials to the REST api